A cross-zone scripting error can be exploited to execute files in

the "Local Machine" security zone.

"ms-its:C:WINDOWSHelpiexplore.chm::/iegetsrt.htm"