Title: Sun Java JRE Font.createFont() Method Disk Space Saturation DoS
Info
Disclosure
May 16, 2006
Discovery
Unknown
Dates
Exploit
Unknown
Solution
Unknown
Description
Java JDK/JRE contains a flaw that may allow a remote denial of service. The issue is triggered when applets are permitted to create large temporary files using the Font.createFont method but are never removed, and will result in loss of availability for the platform.
Classification
Location:
Remote / Network Access
Attack Type:
Denial of Service
Impact:
Loss of Availability
Exploit:
Exploit Public
Disclosure:
OSVDB Verified,
Vendor Verified
OSVDB:
Web Related
Solution
Currently, there are no known upgrades, patches, or workarounds available to correct this issue.