US-CERT TA06-038A -- Multiple Vulnerabilities in Mozilla Products

Technical: http://www.us-cert.gov/cas/techalerts/TA06-038A.html
Non-technical: http://www.us-cert.gov/cas/alerts/SA06-038A.html

It is also worthy of mention that Mozilla had released the appropriate software updates days before this CERT Security Alert came out.

Crispy