CVE-2004-2147: Symantec Norton Antivirus

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

Unknown versions of Symantec Norton AntiVirus and Microsoft Outlook allow attackers to cause a denial of service (crash) via malformed e-mail messages (1) without a body or (2) without a carriage return ("\n") separating the headers from the body.

Affected products

• Symantec Norton Antivirus: version 2.1 only; version 2001 only; version 2002 only; version 2003 only; version corporate_7.0 only; version corporate_7.2 only; …

Published 2004-12-31. Last modified 2026-06-16.