> бла? http://www.securityfocus.com/bid/93621

Что именно "бла"?
> java.awt.Menu objects. By performing actions in code an attacker can cause a pointer to be reused after it has been freed.

AWT, внезапно, платформозависимая часть. И опять же, похоже совершенно внезапно для фанатов -- ВМ  жабы написана отнюдь не на самой жабе ;)
http://openjdk.java.net/groups/awt/
> AWT has a very old code base, and has a complicated structure. Parts of the code are
> ...
> The native parts of the code base are written in C and C++. Most of the code is platform-specific and resides in the corresponding directories: src/solaris/ or src/windows/

 % find /tmp/jdk-687fd7c7986d |grep -i "awt.*menu"|tail 
./src/windows/native/sun/windows/awt_Menu.cpp
./src/windows/native/sun/windows/awt_MenuItem.cpp

use-after-free в самой жабе был бы багом GC.