CVE-2004-1312: A bug in the HTML parser in a certain Microsoft HTML library, as used in various third party products, may...

Security readout for executives and security teams

This CVE describes a remote denial-of-service condition in an HTML parsing component used by some third-party products. The reported impact is mail disruption: affected GFI products could leave messages stuck in IIS or Exchange mail queues. The sources do not provide a CVSS score, patch details, or evidence of active exploitation. Exposure is most likely in legacy Exchange environments still running the named GFI mail filtering or mail security versions. Modern environments are only implicated if they retain these old products or the same vulnerable parsing dependency, which the supplied sources do not confirm. Treat this as a legacy mail availability risk. It is not documented here as data theft or remote code execution, but stalled mail queues can disrupt business communications. Prioritize if affected GFI versions remain in production or support critical Exchange mail flow. Mitigation focus: Inventory GFI MailEssentials for Exchange 9 and 10 deployments.; Inventory GFI MailSecurity for Exchange 8 deployments.; Check GFI KBID002249 and vendor advisories for fixes or supported workarounds..

Prepared

Jun 30, 2026, 01:38 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.