According to FireEye researcher Atif Mushtaq, the latest version of Java is vulnerable, and presumably earlier versions are as well.