Possibly. It creates a sawn-off web server that runs off the CD ROM. When your SWF content runs from a web server then Flash Security is not an issue.
You would find that if your colleague had trusted his CD Drive in Flash Global Security then the links would have worked.
My personal preference when delivering content from a CD ROM is to just use an HTML menu page to launch each module.