Now that apple's released a fix themselves, everyone just click restore at some point, and everything will be as it was. It was a fun ride, and I'm glad to have helped anyone DGTGF helped. Apple's patch seems to be great.

Hopefully Apple will fix this properly instead of just patching this particular case, by separating the internet type/resource bindings completely away from launchservices.

I woiuldn not be too complacent about using a Mozilla or other non aplle webkit based browser. I use Firefox as my main browser with the stock security settings.

I visited here:

http://bronosky.com/pub/AppleScript.htm

...and up popped the help app, followed by a terminal window executing a command I did not tell it to run.

Do not assume you are safe unless you have checked to see that you are.

Hopefully apple will fix this in a timely fashion before somone nasty decides to do something nasty.

to see if you are vulnerable, go tho this url:
http://tinyurl.com/2lwzk
if Kerberos launches, you are vulnerable

It does what it says. Read the comment below by the developer for extra security.