image parsing vulns (versions before 1.5.0_11-b03 and 1.6.0_01-b06 are affected)

http://scary.beasts.org/security/CESA-2006-004.html

There are two pretty evil vulns over in native land, which were fixed with 1.5.0_11-b03 and 1.6.0_01-b06 respectively.

http://java.sun.com/javase/downloads/index.jsp