Isn’t Java Web Start (JWS) supposed to allow web-based distribution of applications? So why would one want to distribute a Java Web Start (JWS) application via CD-ROM? Well, for a number of reasons.

A flaw in the Java Web Start platform could be exploited to allow any Java applet to read, write and run on the affected machine. The flaw is in the way Java applications are handled in the “sandbox.” ...

Sun Microsystems has fixed a pair of security bugs in Java that could be exploited by attackers to take over computers running Windows, Linux and Solaris. The flaws are "highly critical," security ...