A URL bar spoofing vulnerability in WebKit allows attackers to display a misleading URL in the browser address bar.