MS IE HTML Help Shortcut Vulnerability

This demonstration by Georgi Guninski will start Wordpad:
http://www.nat.bg/~joro/chm3.html

This one will demonstrate how the .chm file can be placed on the local machine using a .eml file:
http://www.nat.bg/~joro/eml.html

This demonstration will display the physical path to a Temporary Internet Files folder and attempt to start Wordpad:
http://www.guninski.com/chmtempmain.html


 

Privacy Statement
Copyright 2010, SecurityFocus