Windows fails to handle long share names when accessing a remote file servers such as samba, allowing a malicious server to crash the clients explorer and the ability to execute arbitrary code in the machine as the current user (usually with Administrator rights on Windows machines). Verified to still work on IE 5.0.3700.1000 on Win2k SP4. The author originally notified Microsoft in early 2002.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33179/explorer-vuln.txt
Source: https://packetstormsecurity.com/files/33179/explorer-vuln.txt.html