SecuriTeam"! - Executing Arbitrary Script with mhtml: Protocol Handler (MS07-034)
あれ、いつの間に公開されてたんだろ・・・・
Credit:
The information has been provided by HASEGAWA Yosuke.
The original article can be found at: http://openmya.hacker.jp/hasegawa/security/ms07-034.txt