CVE-2009-3104 : Unspecified vulnerability in Symantec Norton AntiVirus 2005 through 2008; Norton

Unspecified vulnerability in Symantec Norton AntiVirus 2005 through 2008; Norton Internet Security 2005 through 2008; AntiVirus Corporate Edition 9.0 before MR7, 10.0, 10.1 before MR8, and 10.2 before MR3; and Client Security 2.0 before MR7, 3.0, and 3.1 before MR8; when Internet Email Scanning is installed and enabled, allows remote attackers to cause a denial of service (CPU consumption and persistent connection loss) via unknown attack vectors.

Published 2009-09-08 22:30:01

Updated 2025-04-09 00:30:58

Source MITRE

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2009-3104

Symantec » Norton Antivirus » Version: 2005
cpe:2.3:a:symantec:norton_antivirus:2005:*:*:*:*:*:*:*
Matching versions
Symantec » Norton Antivirus » Version: 2006
cpe:2.3:a:symantec:norton_antivirus:2006:*:*:*:*:*:*:*
Matching versions
Symantec » Norton Antivirus » Version: 2007
cpe:2.3:a:symantec:norton_antivirus:2007:*:*:*:*:*:*:*
Matching versions
Symantec » Norton Antivirus » Version: 2008
cpe:2.3:a:symantec:norton_antivirus:2008:*:*:*:*:*:*:*
Matching versions
Symantec » Norton Internet Security » Version: 2005
cpe:2.3:a:symantec:norton_internet_security:2005:*:*:*:*:*:*:*
Matching versions
Symantec » Norton Internet Security » Version: 2006
cpe:2.3:a:symantec:norton_internet_security:2006:*:*:*:*:*:*:*
Matching versions
Symantec » Norton Internet Security » Version: 2007
cpe:2.3:a:symantec:norton_internet_security:2007:*:*:*:*:*:*:*
Matching versions
Symantec » Norton Internet Security » Version: 2008
cpe:2.3:a:symantec:norton_internet_security:2008:*:*:*:*:*:*:*
Matching versions
Symantec » Client Security » Version: 2.0
cpe:2.3:a:symantec:client_security:2.0:*:*:*:*:*:*:*
Matching versions
Symantec » Client Security » Version: 3.1
cpe:2.3:a:symantec:client_security:3.1:*:*:*:*:*:*:*
Matching versions
Symantec » Client Security » Version: 3.0
cpe:2.3:a:symantec:client_security:3.0:*:*:*:*:*:*:*
Matching versions
Symantec » Client Security » Version: 3.1 Update MR7
cpe:2.3:a:symantec:client_security:3.1:mr7:*:*:*:*:*:*
Matching versions
Symantec » Client Security » Version: 3.0 Update MR2
cpe:2.3:a:symantec:client_security:3.0:mr2:*:*:*:*:*:*
Matching versions
Symantec » Client Security » Version: 3.1 Update MR4
cpe:2.3:a:symantec:client_security:3.1:mr4:*:*:*:*:*:*
Matching versions
Symantec » Client Security » Version: 3.1 Update MR5
cpe:2.3:a:symantec:client_security:3.1:mr5:*:*:*:*:*:*
Matching versions
Symantec » Client Security » Version: 3.1 Update MR6
cpe:2.3:a:symantec:client_security:3.1:mr6:*:*:*:*:*:*
Matching versions
Symantec » Client Security » Version: 2.0 Update MR6
cpe:2.3:a:symantec:client_security:2.0:mr6:*:*:*:*:*:*
Matching versions
Symantec » Client Security » Version: 3.0 Update MR1
cpe:2.3:a:symantec:client_security:3.0:mr1:*:*:*:*:*:*
Matching versions
Symantec » Antivirus » Version: 10.0 Corporate Edition
cpe:2.3:a:symantec:antivirus:10.0:*:corporate:*:*:*:*:*
Matching versions
Symantec » Antivirus » Version: 9.0 Update MR6 Corporate Edition
cpe:2.3:a:symantec:antivirus:9.0:mr6:corporate:*:*:*:*:*
Matching versions
Symantec » Antivirus » Version: 10.0 Update MR1 Corporate Edition
cpe:2.3:a:symantec:antivirus:10.0:mr1:corporate:*:*:*:*:*
Matching versions
Symantec » Antivirus » Version: 10.2 Update MR2 Corporate Edition
cpe:2.3:a:symantec:antivirus:10.2:mr2:corporate:*:*:*:*:*
Matching versions
Symantec » Antivirus » Version: 10.2 Corporate Edition
cpe:2.3:a:symantec:antivirus:10.2:*:corporate:*:*:*:*:*
Matching versions
Symantec » Antivirus » Version: 10.1 Update MR4 Corporate Edition
cpe:2.3:a:symantec:antivirus:10.1:mr4:corporate:*:*:*:*:*
Matching versions
Symantec » Antivirus » Version: 10.1 Update MR5 Corporate Edition
cpe:2.3:a:symantec:antivirus:10.1:mr5:corporate:*:*:*:*:*
Matching versions
Symantec » Antivirus » Version: 10.1 Update MR6 Corporate Edition
cpe:2.3:a:symantec:antivirus:10.1:mr6:corporate:*:*:*:*:*
Matching versions
Symantec » Antivirus » Version: 10.1 Update MR7 Corporate Edition
cpe:2.3:a:symantec:antivirus:10.1:mr7:corporate:*:*:*:*:*
Matching versions
Symantec » Antivirus » Version: 10.1 Corporate Edition
cpe:2.3:a:symantec:antivirus:10.1:*:corporate:*:*:*:*:*
Matching versions
Symantec » Antivirus » Version: 9.0 Corporate Edition
cpe:2.3:a:symantec:antivirus:9.0:*:corporate:*:*:*:*:*
Matching versions
Symantec » Antivirus » Version: 10.0 Update MR2 Corporate Edition
cpe:2.3:a:symantec:antivirus:10.0:mr2:corporate:*:*:*:*:*
Matching versions
Symantec » Antivirus » Version: 10.1 Update MP1 Corporate Edition
cpe:2.3:a:symantec:antivirus:10.1:mp1:corporate:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2009-3104

EPSS FAQ

1.59%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 80 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2009-3104

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:N/A:P	8.6	2.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial

CWE ids for CVE-2009-3104

CWE-399

Assigned by: nvd@nist.gov (Primary)

References for CVE-2009-3104

Jump to

Vulnerability Details : CVE-2009-3104

Products affected by CVE-2009-3104

Exploit prediction scoring system (EPSS) score for CVE-2009-3104

CVSS scores for CVE-2009-3104

CWE ids for CVE-2009-3104

References for CVE-2009-3104