I saw that yesterday on a Mac site.
It is more a means of a way to do something malicious then anything else. Ironically it affects all browsers except IE. The people that make their living off of Phishing scams will love it. I'm guessing that we will see this hole quickly fixed.
You can read about it here
http://www.boingboing.net/2005/02/06..._exploit_.html