CVE-2004-0363: Symantec Norton Antispam

High severity, CVSS 7.5. EPSS: 66.6% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the SymSpamHelper ActiveX component (symspam.dll) in Norton AntiSpam 2004, as used in Norton Internet Security 2004, allows remote attackers to execute arbitrary code via a long parameter to the LaunchCustomRuleWizard method.

Affected products

• Symantec Norton Antispam: version 2004 only

Published 2004-04-15. Last modified 2026-06-16.