internetnews.com: Phishers Lurk For Firefox 2.0 Password Manager
Nov 27, 2006, 10:00 (2 Talkback[s])
(Other stories by Sean Michael Kerner)
"Using Mozilla Firefox's built-in Password Manager to keep track
of your browser's passwords? It makes site logins faster but it
also could help malicious sites steal your passwords.
"The bug, which has been known to Mozilla for at least 10 days,
remains unpatched and exploits as well as a proof of concept exist
in the wild..."