Technical Information

Brief overview of the risk:
A remote code execution vulnerability exists in the HTML Help ActiveX control. An attacker could exploit the vulnerability by constructing a specially crafted Web page that could potentially allow remote code execution if a user visited that page. An attacker who successfully exploited this vulnerability could take complete control of an affected system.
Detailed Information on the risk:
This bulletin covers a vulnerability in the HTML Help ActiveX Control. This issue is difficult to reproduce and public exploitation is considered unlikely.Further information on this exploit is available at : MS07-008