The Firefox "QuickTime Bug" - has been fixed. QuickTime Media-Link files contain a qtnext attribute that could be used on Windows systems to launch the default browser with arbitrary command-line options and previously when the default browser was Firefox 2.0.0.6 or earlier, use of the -chrome option allowed a remote attacker to run script commands with the full privileges of the user.

The vulnerability had lasted for a year, causing security guru Eric Schultze last week to recommend that FF users with the QuickTime plug-in switched to IE (or not click on movie files) until the Mozilla Foundation could release a patch, as it has now done.

• i-Technology Viewpoint: Firefox Lessons for the Java Community
• Firefox 2.0: Burning the Fire to Outfox IE
• Mozilla Releases Firefox 2
• Adobe Gives Aid and Comfort to Firefox
• IBM Throws A Security Blanket Around Virtualization
• Security in a SOA
• Apple Making No Allowance for Linux, Firefox and the Creative Commons
• Linux Solution Tackles iPhone AJAX Security
• Application Security in AJAX