CVE-2006-2426
Sun Java Runtime Environment (JRE) 1.5.0_6 and earlier, JDK 1.5.0_6 and earlier, and SDK 1.5.0_6 and earlier allows remote attackers to cause a denial of service (disk consumption) by using the Font.createFont function to create temporary files of arbitrary size in the %temp% directory.
Date published : 2006-05-17
http://www.securityfocus.com/bid/17981
http://www.securityfocus.com/archive/1/434001/100/0/threaded