Are You Vulnerable To Yet Another Java 0Day Exploit?

This advisory describes a January 2013 Java zero-day (affecting Oracle Java 1.7.0–1.7.10) that was actively exploited in the wild and quickly added to browser exploit kits (including Blackhole), enabling drive-by attacks that drop malicious executables; it recommends updating to Java 1.7.11 or disabling Java plugins in major browsers and provides step-by-step disablement instructions.