The original ZDnet story (which has since been updated with this one at CNET News.com: http://news.com.com/Sun+says+Java+flaw+has+been+patched/2100-1002_3-6196 493.html ) refers to the vulnerability described here: http://sunsolve.sun.com/search/document.do?assetkey=1-26-102934-1 sts Stephen Shankland reporter, CNET News.com 235 Second St., San Francisco CA 94105 -----Original Message----- From: Jonathan Smith [mailto:smithj@xxxxxxxxx] Sent: Friday, July 13, 2007 10:42 AM To: full-disclosure@xxxxxxxxxxxxxxxxx; bugtraq@xxxxxxxxxxxxxxxxx Subject: zdnet reports on java vulnerabilities -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 http://www.zdnetasia.com/news/security/0,39044215,62028389,00.htm Anyone have any more details? There are no specifics or relevant links whatsoever on the "report", but perhaps someone else has heard of this? smithj -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.4 (GNU/Linux) iD8DBQFGl7lw0e1Yawpq2XMRAvxpAJwLXXHX7wAdp0ZrUH6N9kqSGClkHgCeLJCr G4kJUCCcTORg02Zv9vVp8K8= =9MMt -----END PGP SIGNATURE-----