CVE-2004-0375: Symantec Client Firewall

Medium severity, CVSS 5.0. EPSS: 8.8% chance of exploitation in the next 30 days.

SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 and 1.1 allow remote attackers to cause a denial of service (infinite loop) via a TCP packet with (1) SACK option or (2) Alternate Checksum Data option followed by a length of zero.

Affected products

• Symantec Client Firewall: version 5.01 only; version 5.1.1 only
• Symantec Client Security: version 1.0 only; version 1.1 only
• Symantec Norton Internet Security: version 2003 only; version 2004 only
• Symantec Norton Personal Firewall: version 2003 only; version 2004 only

Published 2004-08-18. Last modified 2026-06-16.