Multiple buffer overflows in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 7 and earlier, Java System…

Description

Multiple buffer overflows in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 7 and earlier, Java System Development Kit (SDK) and JRE 1.4.2_12 and earlier 1.4.x versions, and SDK and JRE 1.3.1_18 and earlier allow attackers to develop Java applets that read, write, or execute local files, possibly related to (1) integer overflows in the Java_sun_awt_image_ImagingLib_convolveBI, awt_parseRaster, and awt_parseColorModel functions; (2) a stack overflow in the Java_sun_awt_image_ImagingLib_lookupByteRaster function; and (3) improper handling of certain negative values in the Java_sun_font_SunLayoutEngine_nativeLayout function. NOTE: some of these details are obtained from third party information.

Scores

EPSS (exploitation in 30 days)

3.8% · top 9.8% of all CVEs (5 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 9.3.

Weakness

• n/a

Affected products

• n/a

  • affected n/a

References (33)

• 21675 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• http://docs.info.apple.com/article.html?artnum=307177 (opens in a new tab)x_refsource_MISCx_transferred
• ADV-2006-5073 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• 24468 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• HPSBUX02196 (opens in a new tab)vendor-advisoryx_refsource_HPx_transferred
• 102729 (opens in a new tab)vendor-advisoryx_refsource_SUNALERTx_transferred
• RHSA-2007:0062 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• ADV-2007-1814 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• http://scary.beasts.org/security/CESA-2005-008.txt (opens in a new tab)x_refsource_MISCx_transferred
• 25283 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 24099 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 25404 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• oval:org.mitre.oval:def:10134 (opens in a new tab)vdb-entrysignaturex_refsource_OVALx_transferred
• 24189 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• APPLE-SA-2007-12-14 (opens in a new tab)vendor-advisoryx_refsource_APPLEx_transferred
• SUSE-SA:2007:003 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
• VU#939609 (opens in a new tab)third-party-advisoryx_refsource_CERT-VNx_transferred
• SUSE-SA:2007:010 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
• RHSA-2007:0072 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• 23445 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• ADV-2007-4224 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• 23650 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 23835 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 1017425 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred
• RHSA-2007:0073 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• VU#149457 (opens in a new tab)third-party-advisoryx_refsource_CERT-VNx_transferred
• GLSA-200705-20 (opens in a new tab)vendor-advisoryx_refsource_GENTOOx_transferred
• 28115 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• ADV-2007-0936 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• GLSA-200702-08 (opens in a new tab)vendor-advisoryx_refsource_GENTOOx_transferred
• TA07-022A (opens in a new tab)third-party-advisoryx_refsource_CERTx_transferred
• GLSA-200701-15 (opens in a new tab)vendor-advisoryx_refsource_GENTOOx_transferred
• BEA07-174.00 (opens in a new tab)vendor-advisoryx_refsource_BEAx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2006-6731](https://trackcve.app/badge/CVE-2006-6731.svg)](https://trackcve.app/cve/CVE-2006-6731)

Record last updated 7 Aug 2024, 20:34 UTC.