The bug allows hackers to place a fake Web address in one of the browser's pop-up Windows, and could be used to trick a victim...