|The Java Secure Socket Extension (JSSE) in Sun JDK and JRE 6 Update 1
and earlier, JDK and JRE 5.0 Updates 7 through 11, and SDK and JRE
1.4.2_11 through 1.4.2_14, when using JSSE for SSL/TLS support, allows
remote attackers to cause a denial of service (CPU consumption) via
certain SSL/TLS handshake requests.