I hate to sound like my parents (even though they were right some of the time and I was right this time), but I told you so…

“As soon as Firefox became a big player it had to happen.”

Matthew Broersma at Computerworld writes:

Firefox suffers ‘extremely critical’ security hole

“Firefox has two unpatched security holes that could allow an attacker to take control of a user’s computer system, and exploit code is already circulating on the Internet, security researchers have warned.”

“A patch is expected shortly, but users can protect themselves in the meantime by switching off JavaScript. In addition, the Mozilla Foundation said it has now made the flaws effectively impossible to exploit by changes to the server-side download mechanism on the update.mozilla.org and addons.mozilla.org sites, according to security experts.”