Two significant vulnerabilities have been identified in the Mozilla Firefox browser affecting versions 1.0.3 (current) and earlier. A 0day exploit has also been released and confirmed to allow arbitrary code execution using a combination of both vulnerabilities. The vulnerabilities have been fixed in the nightly Firefox builds. Turning off the website software installation feature has been advised as a workaround until an update stable version is released. To disable software installation: (Edit-> Preferences -> Web Features -> uncheck "Allow websites to install software" -> OK).

See the following links for more info:
http://www.mozillazine.org/talkback.html?article=6582
http://secunia.com/advisories/15292/

thanks for the heads-up, personally I never let websites install software automagically...........it is the safest way to go these days.........

Good call, Captain!

--Dane

I had twiddled with that, thinking it might be more secure, but then I wasn't able to install extensions. Weird.

FYI, Fx 1.0.4 is now out.

matrixcubed - to install extensions with website install turned off instead of clicking on the install link for the extension right-click and save the xpi to your computer, then click and drag it into the extensions window to start the install

yeah, check & try this one...... I tried with 1.0.2 windows and it worked......