New Java 0-day exploited in the wild

A new Java zero-day being exploited in the wild has been found. With the files they obtained, AlienVault researchers reproduced the exploit in a fully patched new installation of Java. They tricked the malicious Java applet to execute the calc.exe in their lab. The Java file is highly obfuscated but based on the quick analysis the exploit is probably bypassing certain security checks tricking the permissions of certain Java classes as we saw in CVE-2012-4681.