CVE-2002-2072: Sun JRE

Medium severity, CVSS 5.0. EPSS: 8.9% chance of exploitation in the next 30 days.

java.security.AccessController in Sun Java Virtual Machine (JVM) in JRE 1.2.2 and 1.3.1 allows remote attackers to cause a denial of service (JVM crash) via a Java program that calls the doPrivileged method with a null argument.

Affected products

• Sun JRE: version 1.2.2 only; version 1.3.1 only

Published 2002-12-31. Last modified 2026-06-16.