CVE-2006-2426: Sun JDK

Medium severity, CVSS 6.4. EPSS: 12.7% chance of exploitation in the next 30 days.

Sun Java Runtime Environment (JRE) 1.5.0_6 and earlier, JDK 1.5.0_6 and earlier, and SDK 1.5.0_6 and earlier allows remote attackers to cause a denial of service (disk consumption) by using the Font.createFont function to create temporary files of arbitrary size in the %temp% directory.

Affected products

• Sun JDK: version 1.5.0 only
• Sun JRE: version 1.5.0 only
• Sun SDK: version 1.5.0_6 only

Published 2006-05-17. Last modified 2026-06-16.