CVE-2004-0375: Medium severity Symantec Client Firewall vulnerability
SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 and 1.1 allow remote attackers to cause a denial of service (infinite loop) via a TCP packet with (1) SACK option or (2) Alternate Checksum Data option followed by a length of zero.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0375?
CVE-2004-0375 is classified as a denial of service vulnerability.
How do I fix CVE-2004-0375?
To mitigate CVE-2004-0375, users should update to the latest versions of Symantec Norton Internet Security or other affected products.
What products are affected by CVE-2004-0375?
CVE-2004-0375 affects Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and 2004, Client Firewall versions 5.01 and 5.1.1, and Client Security versions 1.0 and 1.1.
What kind of attack does CVE-2004-0375 exploit?
CVE-2004-0375 can be exploited through a crafted TCP packet containing a SACK option or Alternate Checksum.
When was CVE-2004-0375 reported?
CVE-2004-0375 was reported in April 2004.