CVE-2006-2426

published 2006-05-17

CVE-2006-2426: Sun Java Runtime Environment (JRE) 1.5.0_6 and earlier, JDK 1.5.0_6 and earlier, and SDK 1.5.0_6 and earlier allows remote attackers to cause a denial of…

medium 6.4 CVSS 3.1

AV N AC L Au N C N I P A P

EXPLOIT

Sun Java Runtime Environment (JRE) 1.5.0_6 and earlier, JDK 1.5.0_6 and earlier, and SDK 1.5.0_6 and earlier allows remote attackers to cause a denial of service (disk consumption) by using the Font.createFont function to create temporary files of arbitrary size in the %temp% directory.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
sun	jdk	—	—
sun	jre	—	—
sun	sdk	—	—