CVE-2006-6731: Buffer Overflow
Multiple buffer overflows in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 7 and earlier, Java System Development Kit (SDK) and JRE 1.4.212 and earlier 1.4.x versions, and SDK and JRE 1.3.118 and earlier allow attackers to develop Java applets that read, write, or execute local files, possibly related to (1) integer overflows in the JavasunawtimageImagingLibconvolveBI, awtparseRaster, and awtparseColorModel functions; (2) a stack overflow in the JavasunawtimageImagingLiblookupByteRaster function; and (3) improper handling of certain negative values in the JavasunfontSunLayoutEnginenativeLayout function. NOTE: some of these details are obtained from third party information.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-6731?
CVE-2006-6731 is classified as a critical vulnerability due to its ability to cause buffer overflows in the Sun Java Development Kit and Java Runtime Environment.
How do I fix CVE-2006-6731?
To resolve CVE-2006-6731, users should update their Java Development Kit or Java Runtime Environment to a version later than 5.0 Update 7, 1.4.2_12, or 1.3.1_18.
Which versions are affected by CVE-2006-6731?
CVE-2006-6731 affects Sun Java Development Kit (JDK) 5.0 Update 7 and earlier, as well as Java Runtime Environment (JRE) versions 1.4.2_12 and earlier and 1.3.1_18 and earlier.
What types of attacks can exploit CVE-2006-6731?
Attackers can exploit CVE-2006-6731 to execute arbitrary code by developing malicious Java applets that perform unwanted actions.
Is CVE-2006-6731 a remote code execution vulnerability?
Yes, CVE-2006-6731 represents a remote code execution vulnerability, enabling attackers to execute arbitrary code on affected systems.