On Double Byte Character Set Locale systems, such as Chinese, Japanese, etc, there exists a spoofing vulnerability within Microsoft Internet Explorer that enables attackers to fake the Address field.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/35200/doubleByte.txt
Source: https://packetstormsecurity.com/files/35200/doubleByte.txt.html