vendor:
Java Virtual Machine
by:
Marc Schoenefeld
8.5
CVSS
HIGH
Java Virtual Machine Security Manager Vulnerability
20
CWE
Product Name: Java Virtual Machine
Affected Version From: Java Virtual Machine 1.3.1
Affected Version To: Java Virtual Machine 1.4.1
Patch Exists: YES
Related CWE: CVE-2002-0392
CPE: o:sun:java_virtual_machine
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows, Linux, Mac
2002
Java Virtual Machine Security Manager Vulnerability
A vulnerability exists in the Sun Microsystems Java Virtual Machine when implementing the Security Manager. An attacker can exploit this vulnerability to crash the virtual machine by creating a class that extends the SecurityManager class and calling the classDepth() method with a null argument.
Mitigation:
Sun has released a patch to address this vulnerability.