Really now… Is anyone surprised?  Although the vulnerabilities aren’t supposed to be high risk, there is potential for sensitive data to be leaked.

The French Security Incident Response Team said in an alert that the IE vulnerability, which also affects IE 6, could be exploited in phishing attacks, scams that try to trick people into giving up sensitive information such as credit card data and Social Security numbers. The problem exists because of an error in the way the browser handles certain “onunload” events, the security monitoring company said. Attackers could exploit the issue to spoof the browser address bar, FrSirt said.

Source:  CNET News