The networking software in Windows 95 and Windows 98 allows remote attackers to execute commands via a long file name string, aka the "File Access URL" vulnerability.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2000-0329
https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-049