Seven vulnerabilities have been reported in Sun Java JRE (Java Runtime Environment), which potentially can be exploited by malicious people to compromise a user's system.

The vulnerabilities are caused due to various unspecified errors in the "reflection" APIs. This may be exploited by a malicious, untrusted applet to read and write local files or execute local applications.

The following releases are affected by one or more of the seven vulnerabilities on Windows, Solaris, and Linux platforms:
* JDK and JRE 5.0 Update 5 and prior
* SDK and JRE 1.4.2_09 and prior
* SDK and JRE 1.3.1_16 and prior

Solution
Update to the fixed versions.
Further details available in Customer Area

Provided and/or discovered by
The vendor credits Adam Gowdiak for reporting five of the seven vulnerabilities.

Changelog
Further details available in Customer Area

Original Advisory
Sun Microsystems:
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102171-1

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area