Vulnerability Details CVE-2006-6731
Multiple buffer overflows in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 7 and earlier, Java System Development Kit (SDK) and JRE 1.4.2_12 and earlier 1.4.x versions, and SDK and JRE 1.3.1_18 and earlier allow attackers to develop Java applets that read, write, or execute local files, possibly related to (1) integer overflows in the Java_sun_awt_image_ImagingLib_convolveBI, awt_parseRaster, and awt_parseColorModel functions; (2) a stack overflow in the Java_sun_awt_image_ImagingLib_lookupByteRaster function; and (3) improper handling of certain negative values in the Java_sun_font_SunLayoutEngine_nativeLayout function. NOTE: some of these details are obtained from third party information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.058
EPSS Ranking 90.0%
CVSS Severity
CVSS v2 Score 9.3
Products affected by CVE-2006-6731
-
-
-
cpe:2.3:a:sun:jre:1.3.1_03
-
cpe:2.3:a:sun:jre:1.3.1_04
-
cpe:2.3:a:sun:jre:1.3.1_05
-
cpe:2.3:a:sun:jre:1.3.1_06
-
cpe:2.3:a:sun:jre:1.3.1_07
-
cpe:2.3:a:sun:jre:1.3.1_08
-
cpe:2.3:a:sun:jre:1.3.1_09
-
cpe:2.3:a:sun:jre:1.3.1_10
-
cpe:2.3:a:sun:jre:1.3.1_11
-
cpe:2.3:a:sun:jre:1.3.1_12
-
cpe:2.3:a:sun:jre:1.3.1_13
-
cpe:2.3:a:sun:jre:1.3.1_14
-
cpe:2.3:a:sun:jre:1.3.1_15
-
cpe:2.3:a:sun:jre:1.3.1_16
-
cpe:2.3:a:sun:jre:1.3.1_17
-
cpe:2.3:a:sun:jre:1.3.1_18
-
cpe:2.3:a:sun:jre:1.3.1_2
-
-
cpe:2.3:a:sun:jre:1.4.2_1
-
cpe:2.3:a:sun:jre:1.4.2_10
-
cpe:2.3:a:sun:jre:1.4.2_11
-
cpe:2.3:a:sun:jre:1.4.2_12
-
cpe:2.3:a:sun:jre:1.4.2_2
-
cpe:2.3:a:sun:jre:1.4.2_3
-
cpe:2.3:a:sun:jre:1.4.2_4
-
cpe:2.3:a:sun:jre:1.4.2_5
-
cpe:2.3:a:sun:jre:1.4.2_6
-
cpe:2.3:a:sun:jre:1.4.2_7
-
cpe:2.3:a:sun:jre:1.4.2_8
-
cpe:2.3:a:sun:jre:1.4.2_9
-
-
-
cpe:2.3:a:sun:sdk:1.3.1_01
-
Sun
»
Sdk
»
Version: 1.3.1_01a
cpe:2.3:a:sun:sdk:1.3.1_01a
-
cpe:2.3:a:sun:sdk:1.3.1_02
-
cpe:2.3:a:sun:sdk:1.3.1_03
-
cpe:2.3:a:sun:sdk:1.3.1_04
-
cpe:2.3:a:sun:sdk:1.3.1_05
-
cpe:2.3:a:sun:sdk:1.3.1_06
-
cpe:2.3:a:sun:sdk:1.3.1_07
-
cpe:2.3:a:sun:sdk:1.3.1_08
-
cpe:2.3:a:sun:sdk:1.3.1_09
-
cpe:2.3:a:sun:sdk:1.3.1_10
-
cpe:2.3:a:sun:sdk:1.3.1_11
-
cpe:2.3:a:sun:sdk:1.3.1_12
-
cpe:2.3:a:sun:sdk:1.3.1_13
-
cpe:2.3:a:sun:sdk:1.3.1_14
-
cpe:2.3:a:sun:sdk:1.3.1_15
-
cpe:2.3:a:sun:sdk:1.3.1_16
-
cpe:2.3:a:sun:sdk:1.3.1_17
-
cpe:2.3:a:sun:sdk:1.3.1_18
-
-
cpe:2.3:a:sun:sdk:1.4.2_1
-
cpe:2.3:a:sun:sdk:1.4.2_10
-
cpe:2.3:a:sun:sdk:1.4.2_11
-
cpe:2.3:a:sun:sdk:1.4.2_12
-
cpe:2.3:a:sun:sdk:1.4.2_2
-
cpe:2.3:a:sun:sdk:1.4.2_3
-
cpe:2.3:a:sun:sdk:1.4.2_4
-
cpe:2.3:a:sun:sdk:1.4.2_5
-
cpe:2.3:a:sun:sdk:1.4.2_6
-
cpe:2.3:a:sun:sdk:1.4.2_7
-
cpe:2.3:a:sun:sdk:1.4.2_8
-
cpe:2.3:a:sun:sdk:1.4.2_9