Microsoft Internet Explorer Mouse Tracking Vulnerability

The Javascript fireEvent() method discloses mouse cursor location and the status of control, shift, and alt keys. A remote user can create specially crafted Javascript that, when loaded by the target user, will track the target user's mouse location across the target user's entire display when the browser window is not in focus or is minimized.