Hacker unleashes IE6, IE7 and Firefox 2 bugs

Polish hacker and security researcher Michal Zalewski is a browser's worst nightmare: over the weekend, he released details of serious flaws that he discovered in fully-patched versions of IE 6, IE 7 and Firefox 2.0. Zalewski published demos of the vulnerabilities on the Full Disclosure mailing list, explaining the cookie stealing, page hijacking, memory corruption and URL bar spoofing bugs. The most serious bug, which affects IE6 and IE7, has been rated "critical" by some security experts.