I have heard of this vulnerability, but although it was announced on the Full Disclosure list, it does not provide any details (other than a severity assessment). Does anyone have more info than me, and is able to tell whether non-Oracle JREs (OpenJDK's, for instance) and non-Windows systems are vulnerable to it?
It's been less than 24 hours, and it doesn't seem to have a CVE entry yet, so it's difficult to say. The details are pretty sparse.
All I can give you is my best guess: