Netscape Communicator "Window spoofing security bug".

There is a bug in Netscape Communicator 3.04,4.06,4.5 Win95 and 4.08 WinNT, which allows "window spoofing".
After visiting a hostile page (or clicking a hostile link) a window is opened and its location is a trusted site. However, the content of the window is not that of the original site, but it is supplied by the owner of the page. So, the user is misled he is browising a trusted site, while he is browsing a hostile page and may provide sensitive information, such as credit card number. The bug may be exploited using HTML mail message. It needs Javascript enabled.
Workaround: Disable Javascript
This is completely different from the "Frame spoofing vulnerability"

Demonstration:

Follow the link below, wait 30 seconds and see the result in the new window.
Follow this link to go to www.yahoo.com (or somewhere else)

Go to Georgi Guninski's home page