Java Embedding Plugin 0.9.6.1 allows remote attackers to cause a denial of service (browser crash) via a Thread subclass that calls super.run from its run method.Referenceshttp://sourceforge.net/project/shownotes.php?group_id=107955&release_id=501861http://osvdb.org/40925