The proof-of-concept exploit uses a browser-based Java applet to activate the Unix "say" command on the user's system and recite a statement regarding the exploit initiating an innocuous process.

Goodbye Applets: Another Cruddy Piece of Web Tech Is Finally Going Away Say goodbye to Java in the browser—not an insecure moment too soon. Abstract Halftone Background artishokcs ...