Via Windows Media file (wma) it's possible to open HTML file in local security zone, from html it's open chm, from chm - executable.
vulners.com/securityvulns/securityvulns:doc:2689