http://www.theregister.co.uk/2007/02/13/browser_vulns/ I wonder if this could ever be exploited in real life?