Older versions of Java SE allow attackers to use specially crafted WebStart applications or web services to install malicious code on computers running flawed Java releases