User-Agent: Midori/0.2.0 (X11; Linux x86_64; U; en-us) WebKit/531.2+ Build Identifier: hi, CVE-2007-1084 has been disclosed for quite some time now (even though patches exist [1]). i have tested that the exploit works for ff 2.0.0.19, 3.0.13, and 3.5.5. i have also checked the source for ff 3.5.5, and the patches are indeed not applied. please release fixed versions as soon as possible. thanks. [1] https://bugzilla.mozilla.org/show_bug.cgi?id=371179 Reproducible: Always Steps to Reproduce: 1. follow instructions at: http://lcamtuf.coredump.cx/ffbook