Today Mozilla released an update for the browser Firefox, the update contains several security fixes.
Fixed in Firefox 1.0.4MFSA 2005-44 Privilege escalation via non-DOM property overridesMFSA 2005-43 "Wrapped" javascript: urls bypass security checksMFSA 2005-42 Code execution via javascript: IconURL

News source:
ieXbeta

Full story:
View Here