« Volver al listado

CVE-2004-1312

Estado: ModificadaAlta (10)—

A bug in the HTML parser in a certain Microsoft HTML library, as used in various third party products, may allow remote attackers to cause a denial of service via certain strings, as reported in GFI MailEssentials for Exchange 9 and 10, and GFI MailSecurity for Exchange 8, which causes emails to remain in IIS or Exchange mail queues.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

GFI — MailessentialsGFI — Mailsecurity

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2004-1312",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2005-01-03T05:00:00.000",
  "references": [
    {
      "url": "http://kbase.gfi.com/showarticle.asp?id=KBID002249",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/13708",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.csis.dk/default.asp?m=1&a=194",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/12148",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://kbase.gfi.com/showarticle.asp?id=KBID002249",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/13708",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.csis.dk/default.asp?m=1&a=194",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/12148",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A bug in the HTML parser in a certain Microsoft HTML library, as used in various third party products, may allow remote attackers to cause a denial of service via certain strings, as reported in GFI MailEssentials for Exchange 9 and 10, and GFI MailSecurity for Exchange 8, which causes emails to remain in IIS or Exchange mail queues."
    }
  ],
  "lastModified": "2026-06-16T22:07:27.067",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:gfi:mailessentials:9.0:*:exchange_smtp:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F3462301-EA9D-4C0B-B1A0-84DD4B820694"
            },
            {
              "criteria": "cpe:2.3:a:gfi:mailessentials:10.0:*:exchange_smtp:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F14F6467-7AE0-4C46-B6D2-0E5F549323D3"
            },
            {
              "criteria": "cpe:2.3:a:gfi:mailessentials:10.1:*:exchange_smtp:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "892E89FE-7EFB-4AC8-90A8-36E5CD214E05"
            },
            {
              "criteria": "cpe:2.3:a:gfi:mailsecurity:8.0:*:exchange_smtp:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4B4B0B29-A1FF-4601-A680-423912279A3D"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}