CVE-2004-1312: Gfi Mailessentials

High severity, CVSS 10.0. EPSS: 2.5% chance of exploitation in the next 30 days.

A bug in the HTML parser in a certain Microsoft HTML library, as used in various third party products, may allow remote attackers to cause a denial of service via certain strings, as reported in GFI MailEssentials for Exchange 9 and 10, and GFI MailSecurity for Exchange 8, which causes emails to remain in IIS or Exchange mail queues.

Affected products

• Gfi Mailessentials: version 9.0 only; version 10.0 only; version 10.1 only
• Gfi Mailsecurity: version 8.0 only

Published 2005-01-03. Last modified 2026-06-16.