The Java Update functionality in Java Runtime Environment (JRE) in Sun
Java SE in JDK and JRE 5.0 before Update 22 as well as JDK and JRE 6
before Update 17, when a non-English version of Windows is used, does
not retrieve available new JRE versions, which allows remote attackers
to leverage vulnerabilities in older releases of this software.