With FullAddressBook method of Fetch.FetchContact.1 ActiveX control it's possible to obtain whole Windows address book.
vulners.com/securityvulns/securityvulns:doc:9646