Oracle has issued an urgent update to close a dangerous security hole in its Java software that attackers have been using to deploy malicious software. The patch comes amid revelations that Oracle was notified in April about this vulnerability and a number other potentially unpatched Java flaws. Users with vulnerable versions of Java can have malware silently planted on their systems just by browsing to a hacked or malicious Web site. Oracle also released a security update for systems running Java 6, which brings that version to Java 6 Update 35.”]
Source: https://krebsonsecurity.com/2012/08/security-fix-for-critical-java-flaw-released/