Additional detail over at Ars-
http://arstechnica.com/security/2013/01/critical-java-zero-day-bug-is-being-massively-exploited-in-the-wild/
I still don’t see it. The linked page says almost nothing and the link on the linked page (Kaspersky) doesn’t say much either.