Some vulnerabilities have been reported OpenJDK, which can be exploited malicious people to cause a DoS (Denial of Service) or compromise an application using the library.

The vulnerabilities are caused due to vulnerable Little cms code.

For more information:
SA34367

Solution
Do not process images from untrusted sources using OpenJDK.

Provided and/or discovered by
Chris Evans

Original Advisory
Chris Evans:
http://scary.beasts.org/security/CESA-2009-003.html

oCERT:
http://www.ocert.org/advisories/ocert-2009-003.html

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area