Oracle Releases Out-of-Band Patch to Address Java 7 Vulnerabilities

Oracle has released an out-of-band patch to address multiple vulnerabilities in the Java Runtime Environment (JRE) 7 Update 11 and earlier. These vulnerabilities may allow an attacker to execute
arbitrary code.

US-CERT encourages users and administrators to review the bulletin and follow best-practice security policies to determine which updates should be applied.