In Internet Explorer, using the mhtml: protocol handler and using Outlook Express’s feature, arbitrary resources (such as HTML, image, application file and so on) can opened as MHTML formatted file and Content-Type: is disregarded.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/57293/MS07-034.txt
Source: https://packetstormsecurity.com/files/57293/MS07-034.txt.html