[Drango]

Are you retarded?

This is an exploit of the official Java. It has nothing to do with downloading it. You still haven’t read the alert have you?

[palmer]

Java doesn't do anything unless you download code. No different from Adobe's Flash and their reader. The first step in the exploit is attracting the victim to a malicious website. Most victims go there willingly (porn, get-rich-quick, or other to-good-to-be-true). They download the code. Then the code executes inside the Java VM (or inside of Flash or inside Adobe or even just inside a browser with Javascript turned on. Or any other plug-in that can execute code of some sort.

Next the code exploits some vulnerability in the VM or interpreter, usually some kind of memory error. The memory error causes memory corruption which causes the VM or whatever to execute improper instructions which cause the actual damage (in the current case allowing the java VM to download and execute arbitrary binary code).