Tested OS: winxp
JRE: jre7 b142
Tested browser: ie8/ff4

Steps to reproduce:
1) clear java cache.
2) Launch the applet with java console open http://rehte.cn.oracle.com:8080/wshost/new_ws/deployment/src/plugin/Decoration/Decoration/html/DecorationTrueJnlp.html
3) Drag the applet out of browser. If the following exception is thrown, bug is reproduced.
Exception in thread "AWT-EventQueue-2" java.security.AccessControlException: access denied ("java.io.FilePermission" "C:\DOCUME~1\duke\LOCALS~1\Temp\cache\6.0\26\2657c5a-6.0.lap" "read")
at java.security.AccessControlContext.checkPermission(Unknown Source)
at java.security.AccessController.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkRead(Unknown Source)
at java.io.File.length(Unknown Source)
...

Trace file has been attached with this CR.

This bug can not be reproduced always. Try a few more times.

Source code location:
http://rehte.cn.oracle.com:8080/wshost/new_ws/deployment/src/plugin/Decoration/Decoration/src