The problem and touted solution are defined at these links.
- http://www.politico.com/story/2013/01/feds-issue-warning-on-java-security-86090.html?hp=r3
- http://www.kb.cert.org/vuls/id/625617
- http://nakedsecurity.sophos.com/2012/08/30/how-turn-off-java-browser/