New analysis of a zero-day Java exploit that surfaced last week indicates that it takes advantage of not one but two previously unknown vulnerabilities in the widely-used software. Esteban Guillardoy, a developer at the security firm Immunity Inc., said the underlying vulnerability has been around since July 28, 2011. The latest figures suggest that these vulnerabilities have exposed more than a billion users to attack. Oracle Corp. claims that more than 3 billion devices run Java, but how many of those systems run some version of Java 7?”]
Source: https://krebsonsecurity.com/2012/08/java-exploit-leveraged-two-flaws/