Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2006-2426 — JDK vulnerability

6 documents6 sources
Severity
6.4MEDIUMNVD
EPSS
29.4%
top 3.40%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
3
SUN JDKSUN JRESUN SDK
Timeline
PublishedMay 17
Latest updateMay 1

Description

Sun Java Runtime Environment (JRE) 1.5.0_6 and earlier, JDK 1.5.0_6 and earlier, and SDK 1.5.0_6 and earlier allows remote attackers to cause a denial of service (disk consumption) by using the Font.createFont function to create temporary files of arbitrary size in the %temp% directory.

CVSS vector

AV:N/AC:L/C:N/I:P/A:PExploitability: 10.0 | Impact: 4.9

Affected Packages3 packages

▶NVDsun/jdk1.5.0
▶NVDsun/jre1.5.0
▶NVDsun/sdk1.5.0_6

🔴Vulnerability Details

2
GHSA
GHSA-mwm5-6468-q7xv: Sun Java Runtime Environment (JRE) 1↗2022-05-01
▶
CVEList
CVE-2006-2426: Sun Java Runtime Environment (JRE) 1↗2006-05-17
▶

💥Exploits & PoCs

1
Exploit-DB
Sun Java Applet - Font.createFont Remote Denial of Service↗2006-05-15
▶

📋Vendor Advisories

2
Ubuntu
OpenJDK vulnerabilities↗2009-03-26
▶
Red Hat
Untrusted applet causes DoS by filling up disk space↗2006-05-14
▶
CVE-2006-2426 — SUN JDK vulnerability | cvebase