According to both crimeware authors, the vulnerability exists in all versions of Java 7, including the latest — Java 7 Update 10.
"Further affiant sayeth naught."
org.springframework.aop.framework.AbstractSingletonProxyFactoryBean
Convenient proxy factory bean superclass for proxy factory beans that create only singletons.
(Slashdot)