The host is installed with Oracle Java 1.6.0 through 1.6.0_41 or 1.7.0 through 1.7.0_15 and is prone to arbitrary code execution vulnerability. A flaw is present in the application, which fails to handle a specially crafted applet that, when loaded by the target user, will read and write arbitrary memory in the JVM process. Successful exploitation allows attackers to cause arbitrary code to be executed on the target user's system.