CVE-2004-1907

Low severity, CVSS 2.6. EPSS: 6.7% chance of exploitation in the next 30 days.

The Web Filtering functionality in Kerio Personal Firewall (KPF) 4.0.13 allows remote attackers to cause a denial of service (crash) by sending hex-encoded URLs containing "%13%12%13".

Published 2004-12-31. Last modified 2026-06-16.