The Microsoft Office Outlook Recipient ActiveX control (ole32.dll) in Windows XP SP2 allows remote attackers to cause a denial of service (Internet Explorer 7 hang) via crafted HTML.Referenceshttp://www.securityfocus.com/bid/21649http://shinnai.altervista.org/viewtopic.php?id=41&t_id=8http://securitytracker.com/id?1017397