Internet Explorer 6 and earlier allows remote attackers to create chromeless windows using the Javascript window.createPopup method, which could allow attackers to simulate a victim's display and conduct unauthorized activities or steal sensitive data via social engineering.
- http://marc.info/?l=bugtraq&m=105829174431769&w=2
No PoCs found on GitHub currently.