This vulnerability involves file extensions known to Windows 95 and Windows NT as Shortcuts. A malicious Web site operator could post a link to a .URL file that, for example, creates a folder on a user's computer and then deletes it. The Shortcut is able to do that simply by remotely activating a command in Windows 95 rather than sending code over the network. The .URL files work in both Windows 95 and Windows NT 4.0, while .LNK files work only in Windows 95. These .URL files present a possible greater danger because they can be easily created by server side scripts to meet the specific settings of a user's system.
Potential damage includes loss of all information residing on the affected system.
A patch is available from Microsoft for Internet Explorer at Microsoft. Further information on this vulnerability can be found at CyberSnot. Also see CIAC Bulletin H-38. This script is designed to display information about the Web server environment, but it parses data requests too liberally and thus allows a person to view a listing of arbitrary files on the Web server host. By exploiting this vulnerability, remote users can read a listing of files they are not authorized to read.