"While the vulnerability is in an IE component, there is an attack vector for Firefox users as well," Microsoft said on its IE Blog. "The reason is that .NET Framework 3.5 SP1 installs a 'Windows Presentation Foundation' plug-in in Firefox."