The 2008 Pwnie Winner For Best Client-Side Bug

Multiple URL protocol handling flaws

Discovered by: Nate McFeters, Rob Carter, and Billy Rios

Not just a few vulnerabilities, but an entire attack vector, URI protocol handler flaws pitted web browser and application vendors against each other as one web browser was exploitable through another and each vendor blamed the other for the vulnerability.