Two vulnerabilities have been reported in Java Web Start and Sun Java Runtime Environment (JRE), which can be exploited by malicious people to compromise a user's system.

1) An unspecified error may be exploited by a malicious, untrusted application to execute arbitrary code.

The vulnerability affects Java Web Start included in J2SE releases 5.0 and 5.0 Update 1 for Windows, Solaris and Linux.

2) An unspecified error may be exploited by a malicious, untrusted applet to execute arbitrary code.

The vulnerability affects J2SE releases 5.0 and 5.0 Update 1 for Windows, Solaris and Linux, and J2SE 1.4.2_07 and prior 1.4.2 releases for Windows, Solaris and Linux.

Solution
Update to J2SE 5.0 Update 2 or 1.4.2_08 for Windows, Solaris, and Linux.
Further details available to Secunia VIM customers

Provided and/or discovered by
1) Reported by vendor.
2) The vendor credits Adam Gowdiak.

Changelog
Further details available to Secunia VIM customers

Original Advisory
Sun Microsystems:
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101748-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101749-1

Deep Links
Links available to Secunia VIM customers