CVE-2004-0375
SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 and 1.1 allow remote attackers to cause a denial of service (infinite loop) via a TCP packet…
Does this matter?
Lower severity and a low EPSS score (8.83%). Track it; it rarely justifies an emergency change on its own.
Description
SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 and 1.1 allow remote attackers to cause a denial of service (infinite loop) via a TCP packet with (1) SACK option or (2) Alternate Checksum Data option followed by a length of zero.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
- EPSS
- 8.83% probability · 95th percentile
- CISA KEV
- Not listed
- Affected
- symantec/client firewall · symantec/client security · symantec/norton internet security · symantec/norton personal firewall
- Source
- cve@mitre.org
References
- http://marc.info/?l=bugtraq&m=108275582432246&w=2
- http://securitytracker.com/id?1009379
- http://securitytracker.com/id?1009380
- http://www.eeye.com/html/Research/Upcoming/20040309.html
- http://www.securityfocus.com/bid/9912Exploit, Vendor Advisory
- http://www.symantec.com/avcenter/security/Content/2004.04.20.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15433
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15936
- http://marc.info/?l=bugtraq&m=108275582432246&w=2
- http://securitytracker.com/id?1009379
- http://securitytracker.com/id?1009380
- http://www.eeye.com/html/Research/Upcoming/20040309.html
- http://www.securityfocus.com/bid/9912Exploit, Vendor Advisory
- http://www.symantec.com/avcenter/security/Content/2004.04.20.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15433
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15936
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.