Oracle Java Applet2ClassLoader Class Unsigned Applet Remote Code Execution Vulnerability (CVE-2010-4452)
tested with java 1.6.0 but work with JR6 and lower
ref:
http://cve.mitre.org/cgi-bin/cvename....
http://downloads.securityfocus.com/vu...