0-day vulnerability in Oracle Java is used to install maliscious software

Applet can grant permissions to itself...