Second Java Zero-Day Exploit Uncovered
 

For the second time in a week, a Java vulnerability was discovered by an independent source and could affect Windows, Mac OSX and Linux systems running Java 7. As with the first instance, Oracle hasn't issued a patch for either vulnerability. Researchers are recommending until a patch is issued, that computer operators to disable Java. "The applet can run with the same permissions that the user would normally have, so it's out of the Java sandbox," Beardsley said. "It can do anything that you can do with your computer. It can upload documents, install keyloggers and backdoors—basically anything."

http://www.hardocp.com/news/2012/08/...oit_uncovered/