Secunia

Some vulnerabilities have been reported and acknowledged in Mac OS X, which can be exploited by malicious people to bypass certain security restrictions, conduct cross-site scripting attacks, to cause a DoS (Denial of Service), or to compromise a user's system.

1) An error in Java due to an improper access check can be exploited via a specially crafted Java applet to add or remove items from a user's Keychain, without prompting the user.

This vulnerability affects Mac OS X versions prior to 10.5.

2) Some vulnerabilities in Java 1.4 and J2SE 5.0 can be exploited to bypass certain security restrictions, conduct cross-site scripting attacks, to cause a DoS (Denial of Service), or to compromise a user's system.

For more information:
SA21709
SA23398
SA23445
SA23757
SA25069
SA25295
SA25769
SA25823
SA25981
SA26015
SA26402
SA27009

These vulnerabilities are reported in Mac OS X 10.4.10 and Mac OS X Server 10.4.10. Mac OS X v10.5 is reportedly not affected.

Solution
Update to Java Release 6 for Mac OS X 10.4.
Further details available in Customer Area

Provided and/or discovered by
1) The vendor credits Bruno Harbulot, University of Manchester.

Original Advisory
Apple:
http://docs.info.apple.com/article.html?artnum=307177

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area