Naturally, this only works from a local security zone such as the My
Computer zone. You cannot exploit the Shell.Application object from the
Internet Zone where you get an explanatory "Permission Denied" error.

This eases the process of abusing local security zone privileges but
does not change the...

[ more ]