CVE-2004-0445
The SYMDNS.SYS driver in Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allows remote attackers…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 11.0%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
The SYMDNS.SYS driver in Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allows remote attackers to cause a denial of service (CPU consumption from infinite loop) via a DNS response with a compressed name pointer that points to itself.
- CVSS 2.0
- 2.6 LOWAV:N/AC:H/Au:N/C:N/I:N/A:P
- EPSS
- 11.05% probability · 96th percentile
- CISA KEV
- Not listed
- Affected
- symantec/client firewall · symantec/client security · symantec/norton antispam · symantec/norton internet security · symantec/norton personal firewall
- Source
- cve@mitre.org
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021359.html
- http://secunia.com/advisories/11066
- http://securityresponse.symantec.com/avcenter/security/Content/2004.05.12.htmlPatch, Vendor Advisory
- http://securitytracker.com/id?1010144
- http://securitytracker.com/id?1010145
- http://securitytracker.com/id?1010146
- http://www.ciac.org/ciac/bulletins/o-141.shtml
- http://www.kb.cert.org/vuls/id/682110Patch, Third Party Advisory, US Government Resource
- http://www.osvdb.org/6100
- http://www.securityfocus.com/bid/10336
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16132
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021359.html
- http://secunia.com/advisories/11066
- http://securityresponse.symantec.com/avcenter/security/Content/2004.05.12.htmlPatch, Vendor Advisory
- http://securitytracker.com/id?1010144
- http://securitytracker.com/id?1010145
- http://securitytracker.com/id?1010146
- http://www.ciac.org/ciac/bulletins/o-141.shtml
- http://www.kb.cert.org/vuls/id/682110Patch, Third Party Advisory, US Government Resource
- http://www.osvdb.org/6100
- http://www.securityfocus.com/bid/10336
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16132
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.