CVE-2004-0445: Symantec Client Firewall

Low severity, CVSS 2.6. EPSS: 11% chance of exploitation in the next 30 days.

The SYMDNS.SYS driver in Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allows remote attackers to cause a denial of service (CPU consumption from infinite loop) via a DNS response with a compressed name pointer that points to itself.

Affected products

• Symantec Client Firewall: version 5.01 only; version 5.1.1 only
• Symantec Client Security: version 1.0 only; version 1.1 only; version 1.2 only; version 1.3 only; version 1.4 only; version 1.5 only; …
• Symantec Norton Antispam: version 2004 only
• Symantec Norton Internet Security: version 2002 only; version 2003 only; version 2004 only
• Symantec Norton Personal Firewall: version 2002 only; version 2003 only; version 2004 only

Published 2004-07-07. Last modified 2026-06-16.