Zero day Java web start

http://seclists.org/fulldisclosure/2010/Apr/119