CVE-2002-2072: Medium severity Sun Java Runtime Environment (JRE) vulnerability

Published Dec 31, 2002

Updated

java.security.AccessController in Sun Java Virtual Machine (JVM) in JRE 1.2.2 and 1.3.1 allows remote attackers to cause a denial of service (JVM crash) via a Java program that calls the doPrivileged method with a null argument.

Affected Software

2 affected components

Sun Java Runtime Environment (JRE)=1.3.1

Sun Java Runtime Environment (JRE)=1.2.2

Event History

Dec 31, 2002

CVE Published

05:00 AM

Data Sourced

via NVD·05:00 AM

DescriptionSeverityAffected Software

Jul 14, 2005

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-2072?

CVE-2002-2072 is classified as a denial of service vulnerability due to its potential to crash the Java Virtual Machine.

How do I fix CVE-2002-2072?

To fix CVE-2002-2072, upgrade to a supported version of the Java Runtime Environment that does not contain this vulnerability.

Which versions are affected by CVE-2002-2072?

CVE-2002-2072 affects Sun JRE versions 1.2.2 and 1.3.1 on Linux.

Can CVE-2002-2072 be exploited remotely?

Yes, CVE-2002-2072 can be exploited remotely by attackers using a specially crafted Java program.

What is the impact of CVE-2002-2072?

The impact of CVE-2002-2072 is that it allows remote attackers to cause the Java Virtual Machine to crash, resulting in a denial of service.