Lucene search

[email protected]CVE-2004-0284

HistoryNov 23, 2004 - 5:00 a.m.

CVE-2004-0284

2004-11-2305:00:00

[email protected]

web.nvd.nist.gov

microsoft

internet explorer

outlook

dos

cpu consumption

cve-2004-0284

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.7 Medium

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

84.0%

JSON

Microsoft Internet Explorer 6.0, Outlook 2002, and Outlook 2003 allow remote attackers to cause a denial of service (CPU consumption), if “Do not save encrypted pages to disk” is disabled, via a web site or HTML e-mail that contains two null characters (%00) after the host name.

Affected configurations

NVD

Node

microsoftieMatch6.0sp1

microsoftinternet_explorerMatch6.0

microsoftoutlookMatch2002

microsoftoutlookMatch2002sp1

microsoftoutlookMatch2002sp2

microsoftoutlookMatch2003

CPENameOperatorVersion
microsoft:iemicrosoft ieeq6.0
microsoft:internet_explorermicrosoft internet explorereq6.0
microsoft:outlookmicrosoft outlookeq2002
microsoft:outlookmicrosoft outlookeq2003

CPE	Name	Operator	Version
microsoft:ie	microsoft ie	eq	6.0
microsoft:internet_explorer	microsoft internet explorer	eq	6.0
microsoft:outlook	microsoft outlook	eq	2002
microsoft:outlook	microsoft outlook	eq	2003

References

marc.info/?l=bugtraq&m=107643134712133&w=2

www.securityfocus.com/bid/9629

exchange.xforce.ibmcloud.com/vulnerabilities/15127

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.7 Medium

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

84.0%

JSON

Related for CVE-2004-0284

nvd1 cvelist1