CVE-2004-1312: Critical severity GFI MailEssentials vulnerability
A bug in the HTML parser in a certain Microsoft HTML library, as used in various third party products, may allow remote attackers to cause a denial of service via certain strings, as reported in GFI MailEssentials for Exchange 9 and 10, and GFI MailSecurity for Exchange 8, which causes emails to remain in IIS or Exchange mail queues.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-1312?
CVE-2004-1312 is classified as a denial of service vulnerability.
How do I fix CVE-2004-1312?
To mitigate CVE-2004-1312, update to the latest versions of GFI MailEssentials or GFI MailSecurity that address this vulnerability.
What software is affected by CVE-2004-1312?
CVE-2004-1312 affects GFI MailEssentials versions 9.0, 10.0, 10.1 and GFI MailSecurity version 8.0.
What type of attack does CVE-2004-1312 involve?
CVE-2004-1312 involves an attacker sending specially crafted strings to exploit the HTML parser, leading to a denial of service.
Is there a workaround for CVE-2004-1312?
Implementing strict input validation can help mitigate the risk associated with CVE-2004-1312 until a patch is applied.