On 6/14/05, Alexander Dalloz <ad+lists@xxxxxxxxx> wrote: > As certainly many of us have Sun's Java engine installed, I like to > inform you about following severe vulnerability: > > http://sunsolve.sun.com/search/document.do?assetkey=1-26-101749-1 > > An urgent update is highly recommended, to version 5 update 2 either or > 1.4.2_08! Else through a prepared webpage an applet may read and write > to your local user files and may execute bad code. > > Alexander > > I'm not sure why Sun was so late in making this announcement. The patch was made over two months ago. Version 5 Update 3 has been available since April.