The host is installed with Sun JDK or JRE 5.0 Update 16 or earlier, 1.4.2_18 or earlier or 1.3.1_23 or earlier and is prone to an unspecified vulnerability. A flaw is present in the application, which fails to handle crafted zip file. Successful exploitation could allow untrusted applets and applications to read arbitrary memory via a crafted ZIP file