Michal Zalewski has reported two vulnerabilities in Internet Explorer, which potentially can be exploited by a malicious website to display a fake URL in the address bar or to bypass certain security restrictions.

1) A race condition when navigating to a new site from a page can be exploited to perform certain actions and access the contents of the newly loaded page with the permissions of the old page.

2) An error within the handling of "location" DOM objects can be exploited to spoof the URL address bar.

Note: This issue reportedly does not affect Internet Explorer 7.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
Michal Zalewski

Changelog
Further details available to Secunia VIM customers

Original Advisory
Microsoft (KB969897):
http://www.microsoft.com/technet/security/Bulletin/MS09-019.mspx

Michal Zalewski
http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0026.html
http://lcamtuf.coredump.cx/ierace/

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers