Goes to….. <a title="Dont go there GURLfriend! 1.1 - MacUpdate" href="http://macupdate.com/info.php/id/14992">Dont go there GURLfriend!

in related news, Unsanity have Paranoid Android to fix the same problem.

and:
(via MacInTouch.com)

The simplest fix for the Help system code execution vulnerability is to run the following in Terminal:

sudo defaults write /System/Library/CoreServices/Help Viewer.app/Contents/Info NSAppleScriptEnabled -bool ‘no’

This does not stop disk images from downloading but any malicious payload cannot run without user intervention

shrug I’ll take my chances. I do most of my browsing on Firefox on PC anyway… It’s faster.