HOME VULNERABILITIESCVE-2006-6731

CRITICAL

CVE-2006-6731

NVD-CWE-OtherPublished: December 26, 2006· Updated: Jun 16, 2026

9.3

CVSS v3.1

Official Description

Multiple buffer overflows in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 7 and earlier, Java System Development Kit (SDK) and JRE 1.4.2_12 and earlier 1.4.x versions, and SDK and JRE 1.3.1_18 and earlier allow attackers to develop Java applets that read, write, or execute local files, possibly related to (1) integer overflows in the Java_sun_awt_image_ImagingLib_convolveBI, awt_parseRaster, and awt_parseColorModel functions; (2) a stack overflow in the Java_sun_awt_image_ImagingLib_lookupByteRaster function; and (3) improper handling of certain negative values in the Java_sun_font_SunLayoutEngine_nativeLayout function. NOTE: some of these details are obtained from third party information.

Technical Analysis

CVE-2006-6731 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorNetwork

Attack ComplexityM

Privileges Req.

User Interaction

Scope

Impact

ConfidentialityC

IntegrityC

AvailabilityC

AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected Vendors & Products

sun3 product(s)

jdkjresdk

Source: NVD CPE · 66 total CPE entries

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time

Offensive Security exploit database

GitHub PoC Search

Community PoC repositories

Rapid7 / Metasploit

Metasploit module search

Security advisories & exploits

Official NIST entry

CVE Program entry

External links open in a new tab. Always verify in a controlled environment before use.

Official Patches & Advisories

PATCHhttp://www.securityfocus.com/bid/21675

PATCHhttp://www.securityfocus.com/bid/21675

ADVISORYhttp://dev2dev.bea.com/pub/advisory/243

ADVISORYhttp://docs.info.apple.com/article.html?artnum=307177

ADVISORYhttp://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00876579

ADVISORYhttp://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html

ADVISORYhttp://lists.suse.com/archive/suse-security-announce/2007-Jan/0003.html

ADVISORYhttp://scary.beasts.org/security/CESA-2005-008.txt

ADVISORYhttp://secunia.com/advisories/23445

ADVISORYhttp://secunia.com/advisories/23650

ADVISORYhttp://secunia.com/advisories/23835

ADVISORYhttp://secunia.com/advisories/24099

ADVISORYhttp://secunia.com/advisories/24189

ADVISORYhttp://secunia.com/advisories/24468

ADVISORYhttp://secunia.com/advisories/25283

ADVISORYhttp://secunia.com/advisories/25404

ADVISORYhttp://secunia.com/advisories/28115

ADVISORYhttp://security.gentoo.org/glsa/glsa-200701-15.xml

ADVISORYhttp://security.gentoo.org/glsa/glsa-200702-08.xml

ADVISORYhttp://securitytracker.com/id?1017425

ADVISORYhttp://www.gentoo.org/security/en/glsa/glsa-200705-20.xml

ADVISORYhttp://www.kb.cert.org/vuls/id/149457

ADVISORYhttp://www.kb.cert.org/vuls/id/939609

ADVISORYhttp://www.novell.com/linux/security/advisories/2007_10_ibmjava.html

ADVISORYhttp://www.redhat.com/support/errata/RHSA-2007-0062.html

ADVISORYhttp://www.redhat.com/support/errata/RHSA-2007-0072.html

ADVISORYhttp://www.redhat.com/support/errata/RHSA-2007-0073.html

ADVISORYhttp://www.us-cert.gov/cas/techalerts/TA07-022A.html

ADVISORYhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10134

ADVISORYhttp://dev2dev.bea.com/pub/advisory/243

ADVISORYhttp://docs.info.apple.com/article.html?artnum=307177

ADVISORYhttp://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00876579

ADVISORYhttp://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html

ADVISORYhttp://lists.suse.com/archive/suse-security-announce/2007-Jan/0003.html

ADVISORYhttp://scary.beasts.org/security/CESA-2005-008.txt

ADVISORYhttp://secunia.com/advisories/23445

ADVISORYhttp://secunia.com/advisories/23650

ADVISORYhttp://secunia.com/advisories/23835

ADVISORYhttp://secunia.com/advisories/24099

ADVISORYhttp://secunia.com/advisories/24189

ADVISORYhttp://secunia.com/advisories/24468

ADVISORYhttp://secunia.com/advisories/25283

ADVISORYhttp://secunia.com/advisories/25404

ADVISORYhttp://secunia.com/advisories/28115

ADVISORYhttp://security.gentoo.org/glsa/glsa-200701-15.xml

ADVISORYhttp://security.gentoo.org/glsa/glsa-200702-08.xml

ADVISORYhttp://securitytracker.com/id?1017425

ADVISORYhttp://www.gentoo.org/security/en/glsa/glsa-200705-20.xml

ADVISORYhttp://www.kb.cert.org/vuls/id/149457

ADVISORYhttp://www.kb.cert.org/vuls/id/939609

ADVISORYhttp://www.novell.com/linux/security/advisories/2007_10_ibmjava.html

ADVISORYhttp://www.redhat.com/support/errata/RHSA-2007-0062.html

ADVISORYhttp://www.redhat.com/support/errata/RHSA-2007-0072.html

ADVISORYhttp://www.redhat.com/support/errata/RHSA-2007-0073.html

ADVISORYhttp://www.us-cert.gov/cas/techalerts/TA07-022A.html

ADVISORYhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10134

All References (66)

→

http://dev2dev.bea.com/pub/advisory/243Third Party Advisory

→

http://docs.info.apple.com/article.html?artnum=307177Third Party Advisory

→

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00876579Third Party Advisory

→

http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.htmlMailing List · Third Party Advisory

→

http://lists.suse.com/archive/suse-security-announce/2007-Jan/0003.htmlMailing List · Third Party Advisory

→

http://scary.beasts.org/security/CESA-2005-008.txtThird Party Advisory

→

http://secunia.com/advisories/23445Third Party Advisory

→

http://secunia.com/advisories/23650Third Party Advisory

→

http://secunia.com/advisories/23835Third Party Advisory

→

http://secunia.com/advisories/24099Third Party Advisory

→

http://secunia.com/advisories/24189Third Party Advisory

→

http://secunia.com/advisories/24468Third Party Advisory

→

http://secunia.com/advisories/25283Third Party Advisory

→

http://secunia.com/advisories/25404Third Party Advisory

→

http://secunia.com/advisories/28115Third Party Advisory

Quick Facts

CVE IDCVE-2006-6731

CVSS Score9.3 / 10

SeverityCRITICAL

WeaknessNVD-CWE-Other

CISA KEVNo

Affected1 vendor(s)

PublishedDec 26, 2006

Related CVEs (NVD-CWE-Other)

Recommended Actions

→Apply vendor patches immediately
→Monitor CVE-2006-6731 in threat intel feeds
→Review IDS/IPS signatures for exploitation attempts

Data sourced from NVD (NIST), CISA KEV, and EPSS (FIRST). Analysis generated by CTIWatch. CVE data is provided under the NVD usage policy.

← All Vulnerabilities·Search for CVE-2006-6731·NVD