CVE-2004-0444: Multiple vulnerabilities in SYMDNS.SYS for Symantec Norton Internet Security and Professional 2002 through...

Security readout for executives and security teams

CVE-2004-0444 covers multiple flaws in Symantec firewall-related products from 2002 to 2004. A remote attacker could crash affected systems or potentially run code by sending malformed NBNS or DNS responses. The business concern is legacy endpoint or firewall software still present on old workstations, servers, or embedded builds. Exposure is most plausible in legacy environments running affected Symantec Norton Internet Security, Norton Personal Firewall, Norton AntiSpam, Client Firewall, or Client Security versions listed in the CVE. Modern environments are unlikely to run these versions, but old gold images, labs, and unmanaged endpoints should be checked. Prioritize discovery over emergency response. This is a serious remote code execution and denial-of-service issue, but the affected products are very old and no active exploitation is cited in the provided sources. Any remaining installations should be removed, upgraded, or isolated. Mitigation focus: Identify any affected Symantec products and versions listed in the CVE record.; Check Symantec’s 2004 advisory for product-specific update or mitigation guidance.; Retire or replace unsupported 2002-2004 Symantec firewall/security software..

Prepared

Jun 30, 2026, 05:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.