CVE-2009-3003

CVE-2009-3003 affects Microsoft Internet Explorer 6–8. The vulnerability arises when a page opens a relative URI via window.open, allowing an attacker to spoof the address bar and display an arbitrary URL on the site visited by the victim, potentially triggering a spoofed login form for that site...