Internet Explorer 5.5 and earlier allows remote attackers to display a URL in the address bar that is different than the URL that is actually being displayed, which could be used in web site spoofing attacks, aka the "Web page spoofing vulnerability."

References

• https://nvd.nist.gov/vuln/detail/CVE-2001-0339
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-027
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6556
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1096
• http://www.ciac.org/ciac/bulletins/l-087.shtml
• http://www.osvdb.org/5694
• http://www.securityfocus.com/bid/2737