http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.6 the diff matches with naddy@'s, ok kurt@