Microsoft Internet Explorer window.createPopup() method creates chromeless windows

Overview The Internet Explorer IE window.createPopup method creates chromeless popup windows. These windows can be used to spoof the user interface in Internet Explorer, any Windows application, or the Windows desktop. Description The visible area of a web browser window can be categorized into t...

CVE-2001-1410

The connected CERT entry for CVE-2001-1410 documents that Internet Explorer window.createPopup() creates chromeless popup windows that can spoof the user interface, enabling phishing-style deception and potential interaction with local files. The vulnerability affects IE 6 and earlier and is miti...