Microsoft Internet Explorer is prone to a
vulnerability that allows attackers to trap users at a particular
webpage and spoof page transitions.
Attackers may exploit this via a malicious page to spoof the contents
and origin of a page that the victim may trust. This vulnerability may
be useful in phishing or other attacks that rely on content spoofing.
This issue is due to an error when handling certain "onunload" events,
which could be exploited by attackers to spoof the displayed address
bar by tricking a user into entering a trusted URL manually in the
address bar while visiting a malicious web page.