Vulnerability details and example exploit for Microsoft Active Setup control's unsigned CAB file execution vulnerability. Patched in November, 1999, the vulnerability was so severe that almost any kind of break-in was possible into unpatched IE client machines.
1684ad0afbda5162d8019379c7e169866a47682a78b0a41d05b5b936c363c1ae