Microsoft Outlook Express MHTML URL Processing Vulnerability attack

A vulnerability exists in the MHTML protocol handler of Microsoft Outlook Express. It allows a remote attacker to bypass the domain restriction and execute arbitrary code on the victim computer. Upon opening a malicious email or web page, arbitrary code from a remote location is downloaded and executed without user interaction. The behaviour of the attacked target is dependent on the content of the executed code.