CVE-2004-0375

published 2004-08-18

CVE-2004-0375: SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0…

medium 5 CVSS 3.1

AV N AC L Au N C N I N A P

EXPLOIT

SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 and 1.1 allow remote attackers to cause a denial of service (infinite loop) via a TCP packet with (1) SACK option or (2) Alternate Checksum Data option followed by a length of zero.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
symantec	client_firewall	—	—
symantec	client_firewall	—	—
symantec	client_security	—	—
symantec	client_security	—	—
symantec	norton_internet_security	—	—
symantec	norton_internet_security	—	—
symantec	norton_personal_firewall	—	—
symantec	norton_personal_firewall	—	—