The HTML Help Control vulnerability in Internet Explorer that allows for bypass of local zone security restrictions can be further misused to cause cross-domain and cross-zone scripting attacks.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/34925/IEHTMLHelp.txt
Source: https://packetstormsecurity.com/files/34925/IEHTMLHelp.txt.html