Skip to main content

Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

© 2026 Mondoo, Inc.

Privacy Policy Terms of Service Imprint

Vulnerability Intelligence

CVE-2006-2426 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceCVE-2006-2426

CVE-2006-2426

UNKNOWN

Sun Java Runtime Environment (JRE) 1

Published May 17, 2006

Modified 1 years ago

Details

Sun Java Runtime Environment (JRE) 1.5.0_6 and earlier, JDK 1.5.0_6 and earlier, and SDK 1.5.0_6 and earlier allows remote attackers to cause a denial of service (disk consumption) by using the Font.createFont function to create temporary files of arbitrary size in the %temp% directory.

References(26)

ADVISORYhttp://secunia.com/advisories/20132 ADVISORYhttp://secunia.com/advisories/20457 ADVISORYhttp://secunia.com/advisories/34489 ADVISORYhttp://secunia.com/advisories/34495 ADVISORYhttp://secunia.com/advisories/34496 ADVISORYhttp://secunia.com/advisories/34632 ADVISORYhttp://secunia.com/advisories/34675 ADVISORYhttp://securityreason.com/securityalert/909 WEBhttp://support.avaya.com/elmodocs2/security/ASA-2009-108.htm WEBhttp://support.avaya.com/elmodocs2/security/ASA-2009-109.htm ADVISORYhttp://www.debian.org/security/2009/dsa-1769 WEBhttp://www.illegalaccess.org/exploit/FullDiskApplet.html ADVISORYhttp://www.mandriva.com/security/advisories?name=MDVSA-2009:137 ADVISORYhttp://www.mandriva.com/security/advisories?name=MDVSA-2009:162 ADVISORYhttp://www.novell.com/linux/security/advisories/2006-06-02.html WEBhttp://www.osvdb.org/25561 ADVISORYhttp://www.redhat.com/support/errata/RHSA-2009-0392.html ADVISORYhttp://www.redhat.com/support/errata/RHSA-2009-0394.html WEBhttp://www.securityfocus.com/archive/1/434001/100/0/threaded WEBhttp://www.securityfocus.com/bid/17981 ADVISORYhttp://www.ubuntu.com/usn/usn-748-1 WEBhttp://www.vupen.com/english/advisories/2006/1824 WEBhttps://exchange.xforce.ibmcloud.com/vulnerabilities/26493 WEBhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10609 ADVISORYhttps://rhn.redhat.com/errata/RHSA-2009-0377.html

CVSS Analysis

CVSS v2.0

6.4

Exploitability

Access Vector

NetworkAV:N

Access Complexity

LowAC:L

Authentication

NoneAu:N

Impact

Confidentiality

NoneC:N

Integrity

PartialI:P

Availability

PartialA:P

6.4/AV:N/AC:L/Au:N/C:N/I:P/A:P

Ecosystems

Timeline

PublishedMay 17, 2006

ModifiedAug 7, 2024