Microsoft HTML control as used in (1) Internet Explorer 5.0 (2) FrontPage Express (3) Outlook Express 5 and (4) Eudora and possibly others allows remote malicious web site or HTML emails to cause a denial of service (100% CPU consumption) via large HTML form fields such as text inputs in a table cell.