MS Threat Modeller

SensePost researchers discovered cross-site scripting in Microsoft's Threat Modeller that, when combined with vulnerable ActiveX controls and file:// usage, can be chained to achieve remote code execution; the issue was reported to Microsoft, which declined to investigate further because the product is deprecated and the download was removed.