Sun Java 1.3.1 1.4.1 and 1.4.2 allows local users to cause a denial of service (JVM crash) possibly by calling the ClassDepth function with a null parameter which causes a crash instead of generating a null pointer exception.