CVE-2009-2690
The encoder in Sun Java SE 6 before Update 15, and OpenJDK, grants read access to private variables with unspecified names, which allows context-dependent attackers to obtain sensitive information via an untrusted (1) applet or (2) application.
Date published : 2009-08-10
http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html