CVE-2004-1616

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-10-18 · updated 2026-06-16

Description

Links allows remote attackers to cause a denial of service (memory consumption) via a web page or HTML email that contains a table with a td element and a large rowspan value,as demonstrated by mangleme.

Affected products

Links: 0.91, 0.92, 0.93, 0.94, 0.95, 0.96 (+3)

References

http://lcamtuf.coredump.cx/mangleme/gallery/
http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027709.html
http://marc.info/?l=bugtraq&m=109811406620511&w=2
http://securitytracker.com/id?1011808
http://www.securityfocus.com/bid/11442
https://exchange.xforce.ibmcloud.com/vulnerabilities/17803
http://lcamtuf.coredump.cx/mangleme/gallery/
http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027709.html
http://marc.info/?l=bugtraq&m=109811406620511&w=2
http://securitytracker.com/id?1011808
http://www.securityfocus.com/bid/11442
https://exchange.xforce.ibmcloud.com/vulnerabilities/17803

Get alerted when CVE-2004-1616 or the next vulnerability affects your stack