New Java exploit sells for $5000 on black web; possible threat to millions of PCs