Some path entry causes Windows 10 to crash

Another vulnerability has developed that could cause problems for Windows users. Microsoft has announced – but there is still no solution to the problem.

Security analyst Jonah Leakecard has found a way to crash almost every Windows 10 system with a single line. It writes “heise.de” and refers to I’s contribution.D-Security page “Sleeping Computer”.

Accordingly, there is an error in many versions of Windows, including the current Windows (Windows 10 20 H2). This will cause the system to crash and display a blue screen when the user calls a specific file path.

How the attack works

To go to a specific file or storage location, the path information is entered in the address bar of a browser or in Windows Explorer. Windows 10 also supports inputs that allow software developers to interact with devices such as the hard drive. Lickcard has now found a file path, and opening it causes a crash. It is not clear why this is happening.

We have not released the full printer at this point. It starts with the string “\. GlobalRoot …” – the average user is not at risk of accidentally entering a path in the browser line or file explorer and crashing their computer.

However, any registered user with the necessary background knowledge may intentionally crash a system and cause lasting damage. This does not require administrator rights. In this way, Windows error and sabotage attempts for malicious jokes can be used on other computers as soon as someone approaches them, for example, by logging in as a guest.

Attacks on the Internet are possible

According to the security expert, the attack via the Internet will be hidden in a harmless looking file with the help of a prepared URL shortcut. The disabled user must first download and open this content.

Only in the previous week did LeicaCard discover another serious Windows bug, This can severely damage the NTFS file system. Microsoft Vulnerabilities have already been reported, and at the request of “Sleeping Computer”, updates to the affected devices will be released soon.

Users can protect themselves by leaving their computer unattended without password protection. Be careful when downloading online content and email links because all kinds of malware can be hidden in files.