Typing the URL "c:\aux" or "file://c:\aux" in the
"Address" box of an Internet Explorer 4
window or a shell window we hang Windows 98. This bug might be possible to
exploit in an Email Denial of Service attack.
Regardless it makes a great demo of the lack of robustness in Windows 98 especially
at Macintosh and Linux user group meetings! In a few keystrokes Windows 98 can
be brought to its knees.
AUX is the name of the old DOS auxiliary device which was typically a communications
port.
In Windows 95 and Windows 98, the AUX device driver is terribly broken. Any program
that accidentally tries to access the device will hit the bug. Most Windows programs
have
code in them which will ignore reserved DOS device names like AUX. However, Internet
Explorer missed the check in this one spot.