PT-2006-7332 · Oracle+1 · Jre+2

Chris Evans · Published 2006-12-26 · Updated 2019-10-09 · CVE-2006-6731

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Java Development Kit (JDK) and Java Runtime Environment (JRE) versions prior to 5.0 Update 8 Java System Development Kit (SDK) and JRE 1.4.x versions prior to 1.4.2 13 Java System Development Kit (SDK) and JRE 1.3.1 versions prior to 1.3.1 19

Description: The issue allows attackers to develop Java applets that can read, write, or execute local files. This is possibly related to integer overflows in the Java sun awt image ImagingLib convolveBI, awt parseRaster, and awt parseColorModel functions, a stack overflow in the Java sun awt image ImagingLib lookupByteRaster function, and improper handling of certain negative values in the Java sun font SunLayoutEngine nativeLayout function.

Recommendations: For Java Development Kit (JDK) and Java Runtime Environment (JRE) versions prior to 5.0 Update 8, update to version 5.0 Update 8 or later. For Java System Development Kit (SDK) and JRE 1.4.x versions prior to 1.4.2 13, update to version 1.4.2 13 or later. For Java System Development Kit (SDK) and JRE 1.3.1 versions prior to 1.3.1 19, update to version 1.3.1 19 or later. As a temporary workaround, consider disabling the use of Java applets that utilize the Java sun awt image ImagingLib convolveBI, awt parseRaster, awt parseColorModel, Java sun awt image ImagingLib lookupByteRaster, and Java sun font SunLayoutEngine nativeLayout functions until a patch is available.

Fix

Related Identifiers

CVE-2006-6731

HPSBUX02196

RHSA-2007:0062

RHSA-2007:0072

RHSA-2007:0073

Affected Products

Hp-Ux

Jdk

Jre

References · 39

• http://securityfocus.com/bid/21675 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-6731 · Security Note
• http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2007-0072.html · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102729-1 · Vendor Advisory
• http://lists.suse.com/archive/suse-security-announce/2007-Jan/0003.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2007-0062.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0243 · Security Note
• http://security.gentoo.org/glsa/glsa-200702-08.xml · Vendor Advisory
• http://novell.com/linux/security/advisories/2007_10_ibmjava.html · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200705-20.xml · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6731 · Security Note
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00876579 · Vendor Advisory
• http://dev2dev.bea.com/pub/advisory/243 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2007-0073.html · Vendor Advisory