Microsoft Office/Wordpad Remote Code Execution via URL Moniker

This strike exploits a vulnerability in the way Microsoft Office and Wordpad handles linked URL Moniker OLE objects. The vulnerability gives the attacker remote code execution through MSHTA.exe by forcing the response headers to be of type "application/hta." An attacker may exploit this vulnerability by enticing a user to open a specifically crafted RTF document via email or other methods.