The host is installed with Oracle Java JDK and JRE 6 Update 6 or earlier, 5.0 Update 15 or earlier, 1.4.x before 1.4.2_18, 1.3.x before 1.3.1_23 and is prone to multiple unspecified vulnerabilities. The flaws are present in the application, which fails to handle an applet's outbound connections. Successful exploitation could allow attackers to violate the security model for an applet's outbound connections by connecting to localhost services running on the machine that loaded the applet.