CVE-2004-0375: SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and 2004, Cli...

Security readout for executives and security teams

This is an old Symantec/Norton firewall denial-of-service flaw. A remote attacker could send specially formed TCP traffic that makes the SYMNDIS.SYS driver enter an infinite loop, potentially freezing or disrupting affected systems. It is primarily a legacy-asset concern. Exposure is likely limited to organizations still running the listed Symantec/Norton firewall or client security products. Modern environments are unlikely to be affected unless legacy endpoints, labs, or unsupported systems remain in service. Prioritize this during legacy asset review, especially where old Symantec firewall software protects business-critical or externally reachable systems. For organizations without these products, no immediate action is indicated beyond confirming inventory. Mitigation focus: Inventory endpoints for the listed Symantec and Norton products and versions.; Check the referenced Symantec advisory for vendor-approved updates or replacement guidance.; Remove or upgrade unsupported legacy firewall products where feasible..

Prepared

Jun 30, 2026, 06:10 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.