EIP-2026-115823

This is a writeup describing a denial of service vulnerability in Microsoft Windows Explorer for Windows XP, triggered by malformed HTML tags using the 'shell:' command. The issue causes the application to crash when executing arbitrary programs via crafted links or iframes.