What about a maliciously crafted website with an ActiveX control or something of that like? How hard is that to pull off?
It's tricky, but not impossible. First you gotta do a little research on ActiveX. Shoot me an email to the same addy and I'll tell you how to do it, for research purposes only.
Threaded Mode