CVE-2004-0284: Medium severity Microsoft ie vulnerability
Microsoft Internet Explorer 6.0, Outlook 2002, and Outlook 2003 allow remote attackers to cause a denial of service (CPU consumption), if "Do not save encrypted pages to disk" is disabled, via a web site or HTML e-mail that contains two null characters (%00) after the host name.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0284?
CVE-2004-0284 is categorized as a denial of service vulnerability that can lead to significant CPU consumption.
How do I fix CVE-2004-0284?
To mitigate CVE-2004-0284, ensure the 'Do not save encrypted pages to disk' setting is enabled in Microsoft Internet Explorer, Outlook 2002, and Outlook 2003.
Which software is affected by CVE-2004-0284?
CVE-2004-0284 affects Microsoft Internet Explorer 6.0 and Microsoft Outlook 2002 and 2003.
Can exploitation of CVE-2004-0284 be done through email?
Yes, CVE-2004-0284 can be exploited by sending specially crafted HTML emails containing null characters.
What causes the denial of service in CVE-2004-0284?
The denial of service in CVE-2004-0284 is caused by remote attackers sending web pages or email that trigger excessive CPU usage.