Department of Homeland Securitys U.S. Computer Emergency Readiness Team (US-CERT) is warning about a dangerous security hole in Adobe Shockwave Player. Adobe says it wont be fixing the bug until February 2013. Adobe is not aware of any active exploits or attacks in the wild using this vulnerability. Java 7 update does include some new functionality designed to make it easier to disable Java in the browser. Oracle is expected to stop shipping updates for Java 6 in February 2013; Java 7 Update 10 or Java 6 Update 38.”]
Source: https://krebsonsecurity.com/2012/12/shocking-delay-in-fixing-adobe-shockwave-bug/