Multiple Vulnerabilities in Mozilla Firefox, Netscape

[Mobo]

Situation:

Vulnerabilities have been discovered in the widely distributed browsers Firefox and Netscape. Additionally, code exploiting one of these vulnerabilities has been published.
Description:

Multiple vulnerabilities have been discovered in Netscape and Firefox browsers which may allow users visiting malicious websites to become compromised with spyware or Trojan horse software. In total, 9 vulnerabilities present in versions Firefox 1.0.6 and prior; Mozilla Suite version 1.7.11 and prior; and Netscape 8.0.3.3 and prior have been discovered and published. Exploit code specifically exists for the "IDN Host Remote Buffer Overflow Exploit". This exploit plays on the browsers ability to handle country domain suffixes (e.g. .uk). Greater detail on the exploit code and summarization of the 9 vulnerabilities can be found at the French Security Incident Response Team, the original publishers of the vulnerability and exploit code:

http://www.frsirt.com/english/advisories/2005/1824
Potential Risk:

Browsing with unpatched, vulnerable browsers to web sites configured with malicious exploit code may result in compromise, including infection with spyware and Trojan horse or 'bot' type remote control software. Counterpane considers this to be a moderate risk to individuals using these vulnerable browsers. This risk is increased if antivirus definitions on the PCs are not up to date.
Versions Affected:

Mozilla Firefox: Versions 1.0.6 and prior Netscape: All versions
Counterpane Actions:

Counterpane will continue to monitor the situation. No further updates will be issued unless the situation changes.
Counterpane Recommendations:

If using Firefox versions 1.0.6 or previous, upgrade to version 1.0.7 immediately at:

http://www.mozilla.org/products/firefox/

If using Netscape, consider abstention from browser use until Netscape issue a patch to mitigate these vulnerabilities. Detection:

No IDS / IPS signatures detect this attack vector. No scanners detect this vulnerability.