Oracle Addresses Java?s Symptoms, But Doesn?t Cure SicknessSecurity experts are lukewarm on Oracle's security plans for the Java browser plug-in, largely because they don't address code innate to the platform's security sandbox which has been bypassed in a number of attacks.
Source:
Oracle Addresses Java?s Symptoms, But Doesn?t Cure Sickness