Windows Media player has a unchecked buffer that will allow for remote code execution if users view or open a specially crafted .bmp file. Keep in mind there are many ways for this to be exploited and .bmp files are not the only way. Microsoft states: “An attacker could also attempt to exploit this vulnerability

Sun has released an alert on 7 vulnerabilities in JRE. These vulnerabilities are related to the use of “reflection” API in JRE. As noted in the alert, there is no workaround, upgrading to the latest version is the only solution. Read How to update Java.

The identified vulnerability allows non-privileged users permission to change key program files. This condition presents a risk for shared, multi-user systems. On such systems, a hostile user could take advantage of this condition to replace these program files with malicious or harmful code that could read, write, or destroy sensitive data if subsequently run by