OSVDB ID: 25561

Title: Sun Java JRE Font.createFont() Method Disk Space Saturation DoS

Info

Disclosure

May 16, 2006

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Java JDK/JRE contains a flaw that may allow a remote denial of service. The issue is triggered when applets are permitted to create large temporary files using the Font.createFont method but are never removed, and will result in loss of availability for the platform.

Classification

Location: Remote / Network Access
Attack Type: Denial of Service
Impact: Loss of Availability
Exploit: Exploit Public
Disclosure: OSVDB Verified, Vendor Verified
OSVDB: Web Related

Solution

Currently, there are no known upgrades, patches, or workarounds available to correct this issue.

Products

Sun Microsystems, Inc.

JDK/JRE

1.4.2_11
1.5.0_06

References

Credit

  • Marc Schoenefeld - marc.schoenefeldgmx.org -


Direct URL: http://osvdb.org/25561