Oracle Patches Java Installer Vulnerability
Oracle has released updates for Java 6, 7 and 8 to address a high severity vulnerability that can be exploited by a remote, unauthenticated attacker for arbitrary code execution.
Read more: Oracle Patches Java Installer Vulnerability
Story added 8. February 2016, content source with full text you can find at link above.