Oh dear, another security hole in a nerdy product. This time it's Netscape/Mozilla, and the particularly amusing thing is that Microsoft had a less serious version of the same vulnerability and fixed in back in February. This follows recent problems in SNMP and zlib. What was that about "people in glass houses shouldn't throw stones"?