Reminds me of a story about two Security guys who found a flaw in wifi cards that can hack any OS, they even demo'd it a mac laptop.

Funny they had the same sort of statement, "we have found a real flaw but we don't want to tell people about it...." Bull<cough!>

Since Mozilla are looking at all the code for JavaScript to see if there is an issue then if it exists there's a god chance it will be fixed soon.