What’s Vulnerable › Vulnerabilities

CVE-2009-3104

• Severity: medium (CVSS 4.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2009-09-08 · updated 2026-06-16
• Weakness: CWE-399

Description

Unspecified vulnerability in Symantec Norton AntiVirus 2005 through 2008; Norton Internet Security 2005 through 2008; AntiVirus Corporate Edition 9.0 before MR7, 10.0, 10.1 before MR8, and 10.2 before MR3; and Client Security 2.0 before MR7, 3.0, and 3.1 before MR8; when Internet Email Scanning is installed and enabled, allows remote attackers to cause a denial of service (CPU consumption and persistent connection loss) via unknown attack vectors.

Affected products

• Symantec Antivirus: 9.0, 9.0-mr6, 10.0, 10.0-mr1, 10.0-mr2, 10.1 (+7)
• Symantec Client Security: 2.0, 2.0-mr6, 3.0, 3.0-mr1, 3.0-mr2, 3.1 (+4)
• Symantec Norton Antivirus: 2005, 2006, 2007, 2008
• Symantec Norton Internet Security: 2005, 2006, 2007, 2008

References

• http://osvdb.org/57429
• http://secunia.com/advisories/36493
• http://www.securityfocus.com/bid/34670
• http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090826_01
• http://www.vupen.com/english/advisories/2009/2449
• https://exchange.xforce.ibmcloud.com/vulnerabilities/52820
• http://osvdb.org/57429
• http://secunia.com/advisories/36493
• http://www.securityfocus.com/bid/34670
• http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090826_01
• http://www.vupen.com/english/advisories/2009/2449
• https://exchange.xforce.ibmcloud.com/vulnerabilities/52820

Get alerted when CVE-2009-3104 or the next vulnerability affects your stack