Multiple vulnerabilities has been discovered in different Java implementations. Java Virtual Machines in browsers are supposed to prevent malicious websites from using Java to access local system resources.

JIT bug affecting Netscape versions 4 - 4.8 (Windows)
It is possible to completely bypass safety rules. Allowing malicious websites to access system resources.

Bytecode Verifier vulnerability affecting Internet Explorer all versions 4 - 6
It is possible to completely bypass safety rules. Allowing malicious websites to access system resources.

Bytecode Verifier vulnerability affecting SUN JDK versions 1.1 - 1.4, Netscape versions 4 - 4.8 (all platforms)
It is possible to completely bypass safety rules. Allowing malicious websites to access system resources.

System class implementation affecting Netscape versions 4 - 4.8 (Windows)
Allowing malicious websites to load user provided libraries, when used with the Bytecode Verifier vulnerability an attacker may succesfully execute arbitrary code.

Solution
SUN is the only vendor who has chosen to respond and react to this vulnerability.
Further details available in Customer Area

Provided and/or discovered by
Last Stage of Delirium

Deep Links
Links available in Customer Area