With the firewall on ask :
- Outside the sandbox : 150/340
- Inside the sandbox : 200/340
And I can confirm GloobyGoob findings: Iexplorer is sandboxed, ExplorerAsParent impersonation is not vulnerable.
Greetz, Red.
Btw. If it is ok with you guys, I will ask Petr if he can shine a light on this.