Some vulnerabilities have been reported in BEA JRockit, which can be exploited by malicious people to bypass certain security restrictions, manipulate data, disclose sensitive/system information, or potentially compromise a vulnerable system.

For more information:
SA27009
SA27320

The vulnerabilities affect the following versions of BEA JRockit using Java Web Start or the Java Plug-in for browsers:
* BEA JRockit R24:JRockit 1.4.2_04 R24.3 to 1.4.2_08 R24.5
* BEA JRockit R25:JRockit 1.5.0 R25.0 to 1.5.0_03 R25.2

Solution
Update to the latest version of BEA JRockit (see vendor advisory for more details).

Provided and/or discovered by
Reported by the vendor.

Original Advisory
http://dev2dev.bea.com/pub/advisory/272

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers