If you use Sun's JavaVM (you probably do if you have Windows XP or Win2k+) you need to upgrade your software to patch yourself against a new vulnerability which is remotely exploitable.

This issue has been fixed in J2SE v 1.4.2_06 available at:
http://java.sun.com/j2se/1.4.2/download.html

FYI, java.com has not updated and is still pushing v1.4.2_05

Vulnerability Information:
http://www.idefense.com/application/... hstatus=true