A cross-site scripting vulnerability occurs because a specific ASP file in the IISHELP virtual directory implemented with Microsoft Internet Information Services (IIS) does not sanitize external input.
This problem can be triggered if an IIS system administrator views a specially crafted HTML page containing a hyperlink or through a malicious HTML formatted mail because the IISHELP virtual directory is restricted to local access.
In this case, the HTML tag will not be sanitized and will be embedded into a Web page and rendered by browsers.
If the page is viewed with Internet Explorer, the malicious script will be executed on the "Intranet" security zone. This will make it possible to monitor sessions, copy personal data to a third site or run certain types of local programs.
