CVE-2004-1312

A bug in the HTML parser in a certain Microsoft HTML library, as used in various third party products, may allow remote attackers to cause a denial of service via certain strings, as reported in GFI MailEssentials for Exchange 9 and 10, and GFI MailSecurity for Exchange 8, which causes emails to remain in IIS or Exchange mail queues.

• http://kbase.gfi.com/showarticle.asp?id=KBID002249Patch, Vendor Advisory
• http://secunia.com/advisories/13708
• http://www.csis.dk/default.asp?m=1&a=194Vendor Advisory
• http://www.securityfocus.com/bid/12148
• http://kbase.gfi.com/showarticle.asp?id=KBID002249Patch, Vendor Advisory
• http://secunia.com/advisories/13708
• http://www.csis.dk/default.asp?m=1&a=194Vendor Advisory
• http://www.securityfocus.com/bid/12148

Published

Jan 3, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-1306Heap-based buffer overflow in winhlp32.exe in Windows NT, Wi…
• CVE-2004-1307Integer overflow in the TIFFFetchStripThing function in tif_…
• CVE-2004-1308Integer overflow in (1) tif_dirread.c and (2) tif_fax3.c for…
• CVE-2004-1309Heap-based buffer overflow in the demux_open_bmp function in…
• CVE-2004-1310Stack-based buffer overflow in the asf_mmst_streaming.c func…
• CVE-2004-1311Integer overflow in the real_setup_and_get_header function i…
• CVE-2004-1313The Smc.exe process in My Firewall Plus 5.0 build 1117, and …
• CVE-2004-1314Safari 1.x allows remote attackers to spoof arbitrary web si…
• CVE-2004-1315viewtopic.php in phpBB 2.x before 2.0.11 improperly URL deco…
• CVE-2004-1316Heap-based buffer overflow in MSG_UnEscapeSearchUrl in nsNNT…
• CVE-2004-1317Stack-based buffer overflow in doexec.c in Netcat for Window…
• CVE-2004-1318Cross-site scripting (XSS) vulnerability in namazu.cgi for N…