CVE-2003-0519
Certain versions of Internet Explorer 5 and 6, in certain Windows environments, allow remote attackers to cause a denial of service (freeze) via a URL to C:aux (MS-DOS device name) and possibly other devices.
Date published : 2003-07-10
http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/006286.html