The following is from the F-Prot website (FRISK software) at
www.f-prot.com on the Internet.

  While Microsoft cancelled its scheduled release of monthly security
updates on 13 September 2005, a serious buffer overflow vulnerability
has been discovered in the Mozilla and Firefox browsers. This
vulnerability involves the browser's handling of International Domain
Names (or IDNs) and could potentially allow an attacker to run malicious
code on an affected computer by planting such code on a website.

  Mozilla has released a patch against this vulnerability that disables
the browser's IDN support as well as instructions on how to disable this
manually.

  We recommend that all Mozilla and Firefox users download and apply the
patch as soon as possible or follow the instructions on Mozilla's website.
Mozilla is reportedly working on a more permanent solution to be included
in future versions.

  Firefox has been growing fast in popularity since its official release
in November 2004.

--- SBBSecho 2.11-Win32