"Mozilla Corp. has produced a patch for yet another critical
flaw in Firefox, the latest embarrassment in a lengthening list
this month for the open-source browser.
"Tuesday, security researchers Billy 'BK' Rios of VeriSign Inc.
and Nathan McFeters of Ernst & Young, posted proof-of-concept
code that exploited another URL protocol-handling bug in the
Firefox and Netscape browsers..."