CVE-2004-0445

The SYMDNS.SYS driver in Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allows remote attackers to cause a denial of service (CPU consumption from infinite loop) via a DNS response with a compressed name pointer that points to itself.

Affected products

Client Firewall, Client Security, Norton Antispam, Norton Internet Security, Norton Personal Firewall, Norton Professional

Symantec Client Firewall

= 5.01, 5.1.1

Symantec Client Security

= 1.0, 1.1, 1.2, 1.3, 1.4, 1.5, 1.6, 1.7, 1.8, 1.9, 2.0

Symantec Norton Antispam

= 2004

Symantec Norton Internet Security

= 2002, 2003, 2004

Symantec Norton Personal Firewall

= 2002, 2003, 2004

Fix

Available

CVSS 2.0

2.6 LOW

EPSS

11.0% (96th percentile)

NVD status

Modified

Published

2004-05-20