Vulnerability Details : CVE-2009-3104
Unspecified vulnerability in Symantec Norton AntiVirus 2005 through 2008; Norton Internet Security 2005 through 2008; AntiVirus Corporate Edition 9.0 before MR7, 10.0, 10.1 before MR8, and 10.2 before MR3; and Client Security 2.0 before MR7, 3.0, and 3.1 before MR8; when Internet Email Scanning is installed and enabled, allows remote attackers to cause a denial of service (CPU consumption and persistent connection loss) via unknown attack vectors.
Vulnerability category: Denial of service
Products affected by CVE-2009-3104
- cpe:2.3:a:symantec:norton_antivirus:2005:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:norton_antivirus:2006:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:norton_antivirus:2007:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:norton_antivirus:2008:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:norton_internet_security:2005:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:norton_internet_security:2006:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:norton_internet_security:2007:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:norton_internet_security:2008:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:client_security:2.0:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:client_security:3.1:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:client_security:3.0:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:client_security:3.1:mr7:*:*:*:*:*:*
- cpe:2.3:a:symantec:client_security:3.0:mr2:*:*:*:*:*:*
- cpe:2.3:a:symantec:client_security:3.1:mr4:*:*:*:*:*:*
- cpe:2.3:a:symantec:client_security:3.1:mr5:*:*:*:*:*:*
- cpe:2.3:a:symantec:client_security:3.1:mr6:*:*:*:*:*:*
- cpe:2.3:a:symantec:client_security:2.0:mr6:*:*:*:*:*:*
- cpe:2.3:a:symantec:client_security:3.0:mr1:*:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:10.0:*:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:9.0:mr6:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:10.0:mr1:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:10.2:mr2:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:10.2:*:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:10.1:mr4:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:10.1:mr5:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:10.1:mr6:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:10.1:mr7:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:10.1:*:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:9.0:*:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:10.0:mr2:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:10.1:mp1:corporate:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2009-3104
1.59%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 80 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2009-3104
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
4.3
|
MEDIUM | AV:N/AC:M/Au:N/C:N/I:N/A:P |
8.6
|
2.9
|
NIST |
CWE ids for CVE-2009-3104
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2009-3104
-
http://osvdb.org/57429
-
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090826_01
-
http://www.securityfocus.com/bid/34670
-
http://www.vupen.com/english/advisories/2009/2449
Vendor Advisory
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/52820
-
http://secunia.com/advisories/36493
Vendor Advisory
Jump to