Sasa Kos

**Name of the Vulnerable Software and Affected Versions** Microsoft Internet Explorer version 6.0 Microsoft Outlook version 2002 Microsoft Outlook version 2003 **Description** The issue allows remote attackers to cause a denial of service, specifically CPU consumption, under certain conditions. This can be triggered by visiting a web site or opening an HTML e-mail that contains two null characters (%00) after the host name, provided that the "Do not save encrypted pages to disk" option is disabled. **Recommendations** For Microsoft Internet Explorer version 6.0, enable the "Do not save encrypted pages to disk" option to prevent exploitation. For Microsoft Outlook version 2002, enable the "Do not save encrypted pages to disk" option to prevent exploitation. For Microsoft Outlook version 2003, enable the "Do not save encrypted pages to disk" option to prevent exploitation.