Rather than start a new thread, I'll post this here for now. The Mudcat search feature isn't working this afternoon, so I'll search on Mozilla later and repost it:

Mozilla browser said to have hacker risk

London, England, Jul. 9 (UPI) -- A popular browser for Windows is subject to a security hole for hackers, British researchers say, but this time it's not Internet Explorer. The vulnerability involves Mozilla and Firefox browsers in this case, the Register reported Friday. The flaw is said to affect Mozilla and Firefox on Windows XP or Windows 2000 only. Security firm Secunia rates the problem as "moderately critical."

Security researchers discovered users could be attacked by hackers using a bug in how Mozilla and Firefox handle the "shell:" function in Windows. The function enables Web sites to invoke various programs associated with specific extensions.

The Mozilla Foundation issued a patch Thursday that resolves the flaw by disabling the use of the shell: external protocol handler.