Overlaying windows in a browser is standard functionality, not a vulnerability, Microsoft says--so there are no plans for an update.

IE pop-up spoof won't get patch