Researchers advise users to disable JavaScript. Microsoft says the bug does not affect Internet Explorer 8 and has not seen any attacks in the wild on IE6 or IE7
A new feature in the Mozilla browser bars add-ons from dropping code into Firefox's own directory. The lockdown follows a security issue last month over an add-on and plug-in that Microsoft put on Firefox earlier this year.