Test it here...
http://www.shmoo.com/idn/
There is a link to the advisory there too.
In firefox you can fix it yourself until they issue a new version:
Type about
:config in your address bar.
Scroll down to
network.enableIDN and double-click it to set it to
false
IDN = International Domain Name