CVE-2004-0920: Symantec Norton AntiVirus 2004, and earlier versions, allows a virus or other malicious code to avoid detec...

Security readout for executives and security teams

This is a legacy Symantec Norton AntiVirus issue. A malicious file with a Windows/MS-DOS reserved device name could evade detection or crash the antivirus application. The business concern is weak protection on old endpoints or scanning systems, not a modern platform-wide emergency. Exposure is most likely on legacy systems still running Norton AntiVirus 2004 or earlier, especially where untrusted files are scanned, stored, received by email, or uploaded by users. Treat this as a legacy exposure check. It becomes important if old Norton AntiVirus remains in production, because antivirus bypass undermines malware controls. Otherwise, document it as historical risk. Mitigation focus: Inventory systems for Norton AntiVirus 2004 or earlier.; Replace unsupported legacy antivirus with a supported endpoint security product.; Check Symantec or Broadcom guidance for historical updates or vendor remediation..

Prepared

Jun 30, 2026, 02:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.