eEye Security Advisory - eEye Digital Security has discovered a vulnerability in the way various versions of Windows handle Windows Help (.CHM) files. If exploited, this vulnerability allows arbitrary code to be executed by the remote attacker. A malicious .CHM file can be opened by Internet Explorer without user interaction by using the ms-its protocol specification.
8436f65d98a23317ef683d3d5247c324f8f9d5b1ccfee3217464b065fe672198