From Slashdot:

'This means you can write a 100% reliable exploit in pure Java. This exploit will work on all the platforms, all the architectures and all the browsers,'
And the Java critics said total platform independence was impossible!

(yes I know that this is only affecting OS X Java, the quote was just too good to waste).