New Java security hole affects desktops and servers