Unscored severity · published Sep 8, 2009
CVE-2009-3104
Unspecified vulnerability in Symantec Norton AntiVirus 2005 through 2008; Norton Internet Security 2005 through 2008; AntiVirus Corporate Edition 9.0 before MR7, 10.0, 10.1 before…
–
CVSS
2.2%
EPSS
No
On KEV
Description
Unspecified vulnerability in Symantec Norton AntiVirus 2005 through 2008; Norton Internet Security 2005 through 2008; AntiVirus Corporate Edition 9.0 before MR7, 10.0, 10.1 before MR8, and 10.2 before MR3; and Client Security 2.0 before MR7, 3.0, and 3.1 before MR8; when Internet Email Scanning is installed and enabled, allows remote attackers to cause a denial of service (CPU consumption and persistent connection loss) via unknown attack vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AN
Antivirus · Symantec
9.0; 9.0; 10.0; 10.0; 10.0; 10.1; +7 more · source: NVD
CS
Client Security · Symantec
2.0; 2.0; 3.0; 3.0; 3.0; 3.1; +4 more · source: NVD
NA
Norton Antivirus · Symantec
2005; 2006; 2007; 2008 · source: NVD
NI
Norton Internet Security · Symantec
2005; 2006; 2007; 2008 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-3104
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-3104
osvdb.org
http://osvdb.org/57429
Vendor Advisory
http://secunia.com/advisories/36493
www.securityfocus.com
http://www.securityfocus.com/bid/34670
www.symantec.com
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090826_01
Vendor Advisory
http://www.vupen.com/english/advisories/2009/2449
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/52820
More from Antivirus
–
CVE-2012-4953
The decomposer engine in Symantec Endpoint Protection (SEP) 11.0, Symantec Endpoint Protection Small Business Edition 12.0, Symantec AntiVirus Corporate Edition (SAVCE) 10.x, and…
–
CVE-2011-0688
Intel Alert Management System (aka AMS or AMS2), as used in Symantec Antivirus Corporate Edition (SAVCE) 10.x before 10.1 MR10, Symantec System Center (SSC) 10.x, and Symantec…
–
CVE-2010-0111
HDNLRSVC.EXE in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel Alert Management System (aka AMS or AMS2), as used in Symantec AntiVirus Corporate…
–
CVE-2010-0110
Multiple stack-based buffer overflows in Intel Alert Management System (aka AMS or AMS2), as used in Symantec AntiVirus Corporate Edition (SAVCE) 10.x before 10.1 MR10, Symantec…
–
CVE-2010-3268
The GetStringAMSHandler function in prgxhndl.dll in hndlrsvc.exe in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel Alert Management System (AMS), as…