Browser flaw hits IE and Firefox