Originally Posted by kd5dbl
Looks more like it was a Microsoft API problem than a Mozilla problem

Even still... the Mozilla Firefox team had a fixed version almost as fast as the story broke, so no harm done really.
MSN, Word Vulnerable To Shell: URI Exploit
LnxAddct writes
"InfoWorld is reporting that a few Microsoft products are also vulnerable to the "shell:" scheme vulnerability found in Mozilla last week. These applications include Microsoft Word and MSN Messenger."