Some vulnerabilities have been reported in Sun Java JRE (Java Runtime Environment), which can be exploited by malicious people to compromise a user's system.

1) Two errors exist in the Java Runtime Environment, which can be exploited by malicious, untrusted applets to read and write local files, or to execute local applications.

2) Two errors related to serialisation exist in the Java Runtime Environment, which can be exploited by a malicious, untrusted applet to elevate its privileges.

The following releases are affected:
* JDK and JRE 5.0 Update 7 and prior
* SDK and JRE 1.4.2_12 and prior
* SDK and JRE 1.3.1_18 and prior (not affected by vulnerability #2)

Solution
Update to fixed versions:
Further details available to Secunia VIM customers

Provided and/or discovered by
The vendor credits:
#1) Chris Evans
#2) Tom Hawtin

Changelog
Further details available to Secunia VIM customers

Original Advisory
Sun:
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102729-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102731-1

http://scary.beasts.org/security/CESA-2005-008.txt

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers