While the flaw is only rated as "moderately critical," the rapid adoption of the open-source browser may put a growing number of users at risk. Prior to the release of version 1.0, downloads of earlier versions of the browser had reached 8 million within the first 18 months.
Firefox versions 1.0.1 and 1.0.2 contain the flaw, Secunia said.
The vulnerability stems from an error in the JavaScript engine, according to Secunia. This error can expose arbitrary amounts of heap memory after the end of a JavaScript string. As a result, an exploit may disclose sensitive information in the memory.
"Unlike other browser flaws, this one is not subject to phishing or access to the system. But it can expose sensitive information from other Web sites you visited and the information you entered there," said Thomas Kristensen, Secunia's chief technology officer.
Mozilla is currently working on a patch, and no known cases have been reported, said a Mozilla spokesman.
Secunia has developed a test that allows users to gauge whether their systems are affected by the vulnerability.
It's still better than IE.
All software is bound to have bugs in it, it's only when its under a huge spotlight of attention does anyone bother to jump up and down about it.
Besides this we as windows users cannot get rid of IE that easily. Why? well Windows update requires it
so I cant dump it completely. Well at least untill someone tells me how to.