10.290.2002 - MS02-060: Flaw in Windows XP Help and Support Center Could Enable File Deletion (328940)

An attacker could exploit the vulnerability by constructing a web page that, when opened, would call the errant function and supply the name of an existing file or folder as the argument. The attempt to upload the file or folder would fail, but the file nevertheless would be deleted. The page could be hosted on a web site in order to attack users visiting the site, or could be sent as an HTML mail in order to attack the recipient when it was opened. - View Microsoft Security Bulletin MS02-060 - View Microsoft Knowledge Base Article - 328940 - Visit Microsoft Corporation