Bugtraq: Tiny3 vs Winhelp32 Bof

["Brett Moore" <brett () softwarecreations co nz>]

No so much a bug, more an issue of another default installation setup.

After writing an exploit for the winhelp32, I tested on a pc that had
Tiny 2 installed. As I expected Tiny stopped the outbound connection.

Testing on a Tiny 3 version had no warnings of the outbound connection.

Upon investigation it was found that winhelp32.exe is by default a 
harmless application and therefore has full access no rules.

harmless application? Ever seen one of those?