Slashdotted, a security issue concern the latest version of Firefox 1.0.7 and previous versions. Mozilla and Thunderbird are concerned by this security issue also. the exploit have appeared on 17 october, so you should expect a new fixes coming in the next days to patch this bug. Source of the exploit is available at milw0rm