The Windows help system can allow a local user to execute commands as another user by editing a table of contents metafile with a .CNT extension and modifying the topic action to include the commands to be executed when the .hlp file is accessed.
| Software | From | Fixed in |
|---|---|---|
| microsoft / windows_nt | 4.0 | 4.0.x |
| microsoft / windows_95 | - | - |
| microsoft / windows_98 | - | - |