In reply to Jack Wei.

Quick update: Oracle released a software update that fixes this vulnerability. The update is available on their website. If you disabled Java in the Java Control Panel, it will need to be manually re-enable it after installing the patch by using the check box in the Security tab of the Java Control Panel. I have updated the post with the appropriate links.