vendor:
Java Virtual Machine
by:
SecurityFocus
7.5
CVSS
HIGH
Denial of Service
20
CWE
Product Name: Java Virtual Machine
Affected Version From: 1.3.2001
Affected Version To: 1.4.2001
Patch Exists: YES
Related CWE: CVE-2002-0045
CPE: a:sun:java_virtual_machine
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Linux
2002
Sun Java Virtual Machine Denial of Service Vulnerability
It is possible for a maliciously constructed, valid java program to crash the Sun JVM. This may result in a denial of service attack in a shared environment. The ability to consistantly exploit this vulnerability has been demonstrated on the Linux version of the Sun JVM.
Mitigation:
Ensure that all Java programs are running in a secure environment and that all Java code is properly validated.