In an attack scenario, hackers could either embed an infected Java applet in a legitimate site ... which can subsequently be used to exploit vulnerabilities in that older version.

This even includes some bank sites. The attack is simply a mashup of a GIF picture and a JAR (Java applet). The malicious JAR is compiled and then combined with information from a GIF. The GIF ...