{"id":"CVE-2004-1312","aliases":["EUVD-2004-1309","GHSA-jm4q-cpwg-j7g7"],"status":"published","title":"A bug in the HTML parser in a certain Microsoft HTML library, as used in various third party...","description":"A bug in the HTML parser in a certain Microsoft HTML library, as used in various third party products, may allow remote attackers to cause a denial of service via certain strings, as reported in GFI MailEssentials for Exchange 9 and 10, and GFI MailSecurity for Exchange 8, which causes emails to remain in IIS or Exchange mail queues.","severity":{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.0247,"percentile":0.84607,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2005-01-03T05:00:00Z","modified":"2026-06-16T22:07:27Z","products":[{"vendor":"gfi","product":"mailessentials"},{"vendor":"gfi","product":"mailsecurity"}],"references":[{"url":"http://secunia.com/advisories/13708","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.securityfocus.com/bid/12148","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.csis.dk/default.asp?m=1\u0026a=194","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://kbase.gfi.com/showarticle.asp?id=KBID002249","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-1312"},{"url":"https://github.com/advisories/GHSA-jm4q-cpwg-j7g7"}],"sources":{"cve":[{"id":"CVE-2004-1312","description":"A bug in the HTML parser in a certain Microsoft HTML library, as used in various third party products, may allow remote attackers to cause a denial of service via certain strings, as reported in GFI MailEssentials for Exchange 9 and 10, and GFI MailSecurity for Exchange 8, which causes emails to remain in IIS or Exchange mail queues.","status":"published","published":"2005-01-06T05:00:00Z","modified":"2024-08-08T00:46:12.274Z","updated_at":"2026-11-02T14:34:54.398187Z"}],"euvd":[{"id":"EUVD-2004-1309","description":"A bug in the HTML parser in a certain Microsoft HTML library, as used in various third party products, may allow remote attackers to cause a denial of service via certain strings, as reported in GFI MailEssentials for Exchange 9 and 10, and GFI MailSecurity for Exchange 8, which causes emails to remain in IIS or Exchange mail queues.","status":"published","published":"2005-01-06T05:00:00Z","modified":"2024-08-08T00:46:12Z","updated_at":"2026-11-03T01:15:15.601329Z"}],"ghsa":[{"id":"GHSA-jm4q-cpwg-j7g7","title":"A bug in the HTML parser in a certain Microsoft HTML library, as used in various third party...","description":"A bug in the HTML parser in a certain Microsoft HTML library, as used in various third party products, may allow remote attackers to cause a denial of service via certain strings, as reported in GFI MailEssentials for Exchange 9 and 10, and GFI MailSecurity for Exchange 8, which causes emails to remain in IIS or Exchange mail queues.","status":"published","published":"2022-04-29T02:59:19Z","modified":"2023-01-30T05:03:09Z","updated_at":"2026-11-02T14:46:46.506128Z"}],"nvd":[{"id":"CVE-2004-1312","description":"A bug in the HTML parser in a certain Microsoft HTML library, as used in various third party products, may allow remote attackers to cause a denial of service via certain strings, as reported in GFI MailEssentials for Exchange 9 and 10, and GFI MailSecurity for Exchange 8, which causes emails to remain in IIS or Exchange mail queues.","status":"published","published":"2005-01-03T05:00:00Z","modified":"2026-06-16T22:07:27.067Z","cvss":[{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:00:53.133049Z"}]}}