EIP-2026-118846

This exploit targets a vulnerability in Internet Explorer 6/7 to execute arbitrary commands via a malicious HTML file. It creates a local user with administrative privileges by leveraging a VBScript exploit embedded in an HTML page.