FYI…

- http://secunia.com/advisories/17748/
Release Date: 2005-11-29
Critical: Highly critical
Impact: System access
Where: From remote
Solution Status: Vendor Patch
Software:
Sun Java JDK 1.5.x
Sun Java JRE 1.3.x
Sun Java JRE 1.4.x
Sun Java JRE 1.5.x / 5.x
Sun Java SDK 1.3.x
Sun Java SDK 1.4.x
Description:
Some vulnerabilities have been reported in Sun Java JRE (Java Runtime Environment), which can be exploited by malicious people to compromise a user's system.
1) An unspecified error may be exploited by a malicious, untrusted applet to read and write local files or execute local applications.
The vulnerability has been reported in JDK/JRE 5.0 Update 3 and prior on Windows, Solaris and Linux platforms. SDK/JRE 1.4.2_xx and prior, and 1.3.1_xx releases are not affected….
Solution:
Update to the fixed versions.
JDK and JRE 5.0:
Update to JDK and JRE 5.0 Update 4 or later.
http://java.sun.com/j2se/1.5.0/download.jsp
SDK and JRE 1.4.x:
Update to SDK and JRE 1.4.2_09 or later.
http://java.sun.com/j2se/1.4.2/download.html
SDK and JRE 1.3.x:
Update to SDK and JRE 1.3.1_16 or later.
http://java.sun.com/j2se/1.3/download.html …"

:ph34r: