Sun Java Plug-in Vulnerability

And here I thought we'd run out of these. iDEFENSE has reported a new Java plug-in
 vulnerability (via Actinet's Sun Java Plug-in for Web Browsers: Code Execution). The plug-in is part of the JRE. The Java Plug-in connects Java to web browsers, chiefly so they can run Java applets. The security hole was found in Sun Microsystems' Java 2 Platform, Standard Edition (J2SE) 1.4.2_01 and 1.4.2_04. Earlier versions are thought to be affected too.

This bug can compromise any browser using the technology, including Internet Explorer, Mozilla and Firefox, regardless of the operating system. It was fixed in J2SE 1.4.2_06.