Browser GUI logic flaws

An MSR researcher presented this paper at the Oakland conference this week.
It describes scenarios where an attacker can compose DOM trees and user
action sequences to spoof the address bar and status bar.

A Systematic Approach to Uncover Security Flaws in GUI Logic
Shuo Chen, José Meseguer, Ralf Sasse, Helen J. Wang, Yi-Min Wang
http://research.microsoft.com/~shuochen/papers/GUILogicSecurity.pdf

Where do attacks like this fit in our threat tree?  (this may be one of the
out of scope branches.)

Rachna