CVE-2003-0994: Symantec Norton Antivirus

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

The GUI functionality for an interactive session in Symantec LiveUpdate 1.70.x through 1.90.x, as used in Norton Internet Security 2001 through 2004, SystemWorks 2001 through 2004, and AntiVirus and Norton AntiVirus Pro 2001 through 2004, AntiVirus for Handhelds v3.0, allows local users to gain SYSTEM privileges.

Affected products

• Symantec Norton Antivirus: version 2.1 only; version 2001 only; version 2002 only; version 2003 only; version 2004 only; version v3.0 only
• Symantec Norton Internet Security: version 2001 only; version 2002 only; version 2003 only; version 2004 only
• Symantec Norton System Works: version 2001 only; version 2002 only; version 2003 only; version 2004 only
• Symantec Windows Liveupdate: version 1.70.x only; version 1.90.x only

Published 2004-02-03. Last modified 2026-06-16.