It's possible to inject script code into banner window to execute code in My Computer security zone.
vulners.com/securityvulns/securityvulns:doc:12580