VUPEN Vulnerability Research Team discovered a vulnerability in Sun Java JDK/JRE. The flaw is caused by a buffer overflow error within the Unpack200 component when processing malformed data, which could be exploited by attackers to execute arbitrary code via a malicious archive.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/87923/jdkjreunpack200-overflow.txt
Source: https://packetstormsecurity.com/files/87923/Sun-Java-JDK-JRE-Unpack200-Buffer-Overflow.html