A flaw in Microsoft Internet Explorer allows malicious remote users the ability to manipulate access controls in popup.show() resulting in executable mouse click actions.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33764/hijackclick3.txt
Source: https://packetstormsecurity.com/files/33764/hijackclick3.txt.html