It's so bad the Department of Homeland Security is getting in on it (and everybody's freaking out because of that): <http://www.us-cert.gov/cas/techalerts/TA13-010A.html> Oracle has issued fixed version of Java: http://www.oracle.com/technetwork/java/javase/downloads/index.html
Thanks, but we are aware of this. *** This bug has been marked as a duplicate of bug 451206 ***