$ cve CVE-2004-0445 JSON

CVE-2004-0445 EXPLOIT

2.6

LOW · CVSS 2.0 · EPSS 11% (pctl 96)

Patch early

A public exploit exists.

Description

The SYMDNS.SYS driver in Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allows remote attackers to cause a denial of service (CPU consumption from infinite loop) via a DNS response with a compressed name pointer that points to itself.

Scoring

CVSS	2.6 (LOW, v2.0)
Vector	AV:N/AC:H/Au:N/C:N/I:N/A:P
EPSS	11.05% — more likely to be exploited than 96% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2004-07-07
Last modified	2026-06-16

Affected (5)

Vendor	Product
symantec	client firewall
symantec	client security
symantec	norton antispam
symantec	norton internet security
symantec	norton personal firewall

Public exploits

Source	Title	Date
exploit-db	Symantec Multiple Firewall - DNS Response Denial of Service	2004-05-16

References

→ the Explorer · watch your stack · NVD