CVE-2004-0284: Microsoft Ie

Medium severity, CVSS 5.0. EPSS: 16.8% chance of exploitation in the next 30 days.

Microsoft Internet Explorer 6.0, Outlook 2002, and Outlook 2003 allow remote attackers to cause a denial of service (CPU consumption), if "Do not save encrypted pages to disk" is disabled, via a web site or HTML e-mail that contains two null characters (%00) after the host name.

Affected products

• Microsoft Ie: version 6.0 only
• Microsoft Internet Explorer: version 6.0 only
• Microsoft Outlook: version 2002 only; version 2003 only

Published 2004-11-23. Last modified 2026-06-16.