"Any web browser that supports Java will become a vulnerability vector if Quicktime is installed," NIST reports. "If Java support is disabled in the browser it can no longer be used for an attack.