CVE-2004-0284

CVE-2004-0284 describes a denial-of-service vulnerability affecting Microsoft Internet Explorer 6.0, Outlook 2002, and Outlook 2003. Remote attackers can exploit this by sending a specially crafted web page or HTML email containing two null characters after the hostname, provided the "Do not save encrypted pages to disk" setting is disabled. The vulnerability has a CVSS score of 5.0, indicating a medium severity. It is easily exploitable over the network with low attack complexity, leading to a denial of service through high CPU consumption. There is no impact on confidentiality or integrity. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Despite its age, the CVE has garnered significant community discussion, with 10 mentions, primarily on GitHub.