Unscored severity · published Aug 18, 2004
CVE-2004-0375
SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 and 1.1 allow…
–
CVSS
8.8%
EPSS
No
On KEV
Description
SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 and 1.1 allow remote attackers to cause a denial of service (infinite loop) via a TCP packet with (1) SACK option or (2) Alternate Checksum Data option followed by a length of zero.
Exploitation
Is it being used?
Exploit prediction (EPSS)8.8% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CF
Client Firewall · Symantec
5.01; 5.1.1 · source: NVD
CS
Client Security · Symantec
1.0; 1.1 · source: NVD
NI
Norton Internet Security · Symantec
2003; 2003; 2004; 2004 · source: NVD
NP
Norton Personal Firewall · Symantec
2003; 2004 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0375
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0375
marc.info
http://marc.info/?l=bugtraq&m=108275582432246&w=2
securitytracker.com
http://securitytracker.com/id?1009379
securitytracker.com
http://securitytracker.com/id?1009380
www.eeye.com
http://www.eeye.com/html/Research/Upcoming/20040309.html
Exploit
http://www.securityfocus.com/bid/9912
www.symantec.com
http://www.symantec.com/avcenter/security/Content/2004.04.20.html
More from Client Firewall
–
CVE-2004-0444
Multiple vulnerabilities in SYMDNS.SYS for Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004,…
–
CVE-2004-0445
The SYMDNS.SYS driver in Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall…