Utilizing the MHTML parsing vulnerability in conjunction with the BackToFramedJpu vulnerability, a malicious attacker can obtain full MYCOMPUTER security zone access to a victim machine.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/32276/combofun.txt
Source: https://packetstormsecurity.com/files/32276/combofun.txt.html