Sun Microsystems has issued fixes for five security bugs in Java. The bugs occur on machines running Linux, Solaris and Windows, and affect the Java Runtime Environment. The flaws could lead to an intruder using a Java application to inappropriately read and write files, or to run code on a victim's computer.

The vulnerabilities also affect specific versions of the Sun Java Software Development Kit SDK and Java Development Kit (JDK), according to those advisories.

Three of the bugs lie in application programming interface parts of the Java Runtime Environment (JRE). Another vulnerability lies in the Java Management Extensions implementation in the software. The fifth flaw is in an unspecified part of the JRE.