CVE-2004-1312 - CVE House
Back to Database
Status published Critical CVE-2004-1312

A bug in the HTML parser in a certain Microsoft...

Vulnerability Description

A bug in the HTML parser in a certain Microsoft HTML library, as used in various third party products, may allow remote attackers to cause a denial of service via certain strings, as reported in GFI MailEssentials for Exchange 9 and 10, and GFI MailSecurity for Exchange 8, which causes emails to remain in IIS or Exchange mail queues.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2004-1312

Credits & Attribution

No credits recorded in the NVD database.

References

More from gfi

View All →
CVE-2021-29281
File upload vulnerability in GFI Mail Archiver versions up to...
Critical 9.8
CVE-2019-16414
A DOM based XSS in GFI Kerio Control v9.3.0 allows...
Medium 6.1
CVE-2017-7440
Kerio Connect 8.0.0 through 9.2.2, and Kerio Connect Client desktop...
Medium 6.5
CVE-2010-5254
Untrusted search path vulnerability in GFI Backup 3.1 Build 20100730...
Medium 6.9
CVE-2010-5181
Race condition in VIPRE Antivirus Premium 4.0.3272 on Windows XP...
Unknown 0

Affected Vendor

Affected Software

mailessentials, mailsecurity
Vulnerable Versions:
9.0, 10.0, 10.1, 8.0

Timeline

Official Publish: January 6th, 2005
Last Modified: August 8th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.