It's possible to retrieve sensitive information about user's computer.
vulners.com/securityvulns/securityvulns:doc:13278