## Description

The Windows help system can allow a local user to execute commands as another user by editing a table of contents metafile with a .CNT extension and modifying the topic action to include the commands to be executed when the .hlp file is accessed.

## Severity

Overall Severity: N/A

### CVSS Metrics

Type | Score | Severity | Vector
--- | --- | --- | ---

## Affected Products

### microsoft - windows_95

Affected Versions:

- *

### microsoft - windows_98

Affected Versions:

- *

### microsoft - windows_nt

Affected Versions:

- 4.0

## References

- http://www.securityfocus.com/bid/868
- http://www.securityfocus.com/bid/868

Neural Processor Active