By using resource from GoogleToolbar1.dll it's possible to execute scripting in local zone.
vulners.com/securityvulns/securityvulns:doc:6827