CVE-2009-3104: Symantec Antivirus

Medium severity, CVSS 4.3. EPSS: 2.2% chance of exploitation in the next 30 days.

Unspecified vulnerability in Symantec Norton AntiVirus 2005 through 2008; Norton Internet Security 2005 through 2008; AntiVirus Corporate Edition 9.0 before MR7, 10.0, 10.1 before MR8, and 10.2 before MR3; and Client Security 2.0 before MR7, 3.0, and 3.1 before MR8; when Internet Email Scanning is installed and enabled, allows remote attackers to cause a denial of service (CPU consumption and persistent connection loss) via unknown attack vectors.

Affected products

• Symantec Antivirus: version 9.0 only; version 10.0 only; version 10.1 only; version 10.2 only
• Symantec Client Security: version 2.0 only; version 3.0 only; version 3.1 only
• Symantec Norton Antivirus: version 2005 only; version 2006 only; version 2007 only; version 2008 only
• Symantec Norton Internet Security: version 2005 only; version 2006 only; version 2007 only; version 2008 only

Published 2009-09-08. Last modified 2026-06-16.