Read the docs
TI-2009-02959 Aliases CVE-2009-3104GHSA-j4gj-mw2c-mqx6

Unspecified vulnerability in Symantec Norton AntiVirus 2005 through 2008; Norton Internet…

Priority LOW 24CWE-399Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-399 and the CVSS impact.

Summary

Unspecified vulnerability in Symantec Norton AntiVirus 2005 through 2008; Norton Internet Security 2005 through 2008; AntiVirus Corporate Edition 9.0 before MR7, 10.0, 10.1 before MR8, and 10.2 before MR3; and Client Security 2.0 before MR7, 3.0, and 3.1 before MR8; when Internet Email Scanning is installed and enabled, allows remote attackers to cause a denial of service (CPU consumption and persistent connection loss) via unknown attack vectors.

Why it matters now

EPSS 0.02204 82nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 31

CPEVersionsRoleVendor
cpe:2.3:a:symantec:antivirus:9.0:*:corporate:*:*:*:*:*9.0VulnerableSymantec
cpe:2.3:a:symantec:antivirus:9.0:mr6:corporate:*:*:*:*:*9.0 mr6VulnerableSymantec
cpe:2.3:a:symantec:antivirus:10.0:*:corporate:*:*:*:*:*10.0VulnerableSymantec
cpe:2.3:a:symantec:antivirus:10.0:mr1:corporate:*:*:*:*:*10.0 mr1VulnerableSymantec
cpe:2.3:a:symantec:antivirus:10.0:mr2:corporate:*:*:*:*:*10.0 mr2VulnerableSymantec
cpe:2.3:a:symantec:antivirus:10.1:*:corporate:*:*:*:*:*10.1VulnerableSymantec
cpe:2.3:a:symantec:antivirus:10.1:mp1:corporate:*:*:*:*:*10.1 mp1VulnerableSymantec
cpe:2.3:a:symantec:antivirus:10.1:mr4:corporate:*:*:*:*:*10.1 mr4VulnerableSymantec
cpe:2.3:a:symantec:antivirus:10.1:mr5:corporate:*:*:*:*:*10.1 mr5VulnerableSymantec
cpe:2.3:a:symantec:antivirus:10.1:mr6:corporate:*:*:*:*:*10.1 mr6VulnerableSymantec
  • cpe:2.3:a:symantec:antivirus:9.0:*:corporate:*:*:*:*:* Versions 9.0 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:antivirus:9.0:mr6:corporate:*:*:*:*:* Versions 9.0 mr6 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:antivirus:10.0:*:corporate:*:*:*:*:* Versions 10.0 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:antivirus:10.0:mr1:corporate:*:*:*:*:* Versions 10.0 mr1 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:antivirus:10.0:mr2:corporate:*:*:*:*:* Versions 10.0 mr2 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:antivirus:10.1:*:corporate:*:*:*:*:* Versions 10.1 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:antivirus:10.1:mp1:corporate:*:*:*:*:* Versions 10.1 mp1 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:antivirus:10.1:mr4:corporate:*:*:*:*:* Versions 10.1 mr4 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:antivirus:10.1:mr5:corporate:*:*:*:*:* Versions 10.1 mr5 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:antivirus:10.1:mr6:corporate:*:*:*:*:* Versions 10.1 mr6 Vulnerable ·Symantec
Show 21 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:symantec:antivirus:10.1:mr7:corporate:*:*:*:*:*10.1 mr7VulnerableSymantec
cpe:2.3:a:symantec:antivirus:10.2:*:corporate:*:*:*:*:*10.2VulnerableSymantec
cpe:2.3:a:symantec:antivirus:10.2:mr2:corporate:*:*:*:*:*10.2 mr2VulnerableSymantec
cpe:2.3:a:symantec:client_security:2.0:*:*:*:*:*:*:*2.0VulnerableSymantec
cpe:2.3:a:symantec:client_security:2.0:mr6:*:*:*:*:*:*2.0 mr6VulnerableSymantec
cpe:2.3:a:symantec:client_security:3.0:*:*:*:*:*:*:*3.0VulnerableSymantec
cpe:2.3:a:symantec:client_security:3.0:mr1:*:*:*:*:*:*3.0 mr1VulnerableSymantec
cpe:2.3:a:symantec:client_security:3.0:mr2:*:*:*:*:*:*3.0 mr2VulnerableSymantec
cpe:2.3:a:symantec:client_security:3.1:*:*:*:*:*:*:*3.1VulnerableSymantec
cpe:2.3:a:symantec:client_security:3.1:mr4:*:*:*:*:*:*3.1 mr4VulnerableSymantec
cpe:2.3:a:symantec:client_security:3.1:mr5:*:*:*:*:*:*3.1 mr5VulnerableSymantec
cpe:2.3:a:symantec:client_security:3.1:mr6:*:*:*:*:*:*3.1 mr6VulnerableSymantec
cpe:2.3:a:symantec:client_security:3.1:mr7:*:*:*:*:*:*3.1 mr7VulnerableSymantec
cpe:2.3:a:symantec:norton_antivirus:2005:*:*:*:*:*:*:*2005VulnerableSymantec
cpe:2.3:a:symantec:norton_antivirus:2006:*:*:*:*:*:*:*2006VulnerableSymantec
cpe:2.3:a:symantec:norton_antivirus:2007:*:*:*:*:*:*:*2007VulnerableSymantec
cpe:2.3:a:symantec:norton_antivirus:2008:*:*:*:*:*:*:*2008VulnerableSymantec
cpe:2.3:a:symantec:norton_internet_security:2005:*:*:*:*:*:*:*2005VulnerableSymantec
cpe:2.3:a:symantec:norton_internet_security:2006:*:*:*:*:*:*:*2006VulnerableSymantec
cpe:2.3:a:symantec:norton_internet_security:2007:*:*:*:*:*:*:*2007VulnerableSymantec
cpe:2.3:a:symantec:norton_internet_security:2008:*:*:*:*:*:*:*2008VulnerableSymantec
  • cpe:2.3:a:symantec:antivirus:10.1:mr7:corporate:*:*:*:*:* Versions 10.1 mr7 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:antivirus:10.2:*:corporate:*:*:*:*:* Versions 10.2 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:antivirus:10.2:mr2:corporate:*:*:*:*:* Versions 10.2 mr2 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:2.0:mr6:*:*:*:*:*:* Versions 2.0 mr6 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:3.0:mr1:*:*:*:*:*:* Versions 3.0 mr1 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:3.0:mr2:*:*:*:*:*:* Versions 3.0 mr2 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:3.1:*:*:*:*:*:*:* Versions 3.1 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:3.1:mr4:*:*:*:*:*:* Versions 3.1 mr4 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:3.1:mr5:*:*:*:*:*:* Versions 3.1 mr5 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:3.1:mr6:*:*:*:*:*:* Versions 3.1 mr6 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:3.1:mr7:*:*:*:*:*:* Versions 3.1 mr7 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:norton_antivirus:2005:*:*:*:*:*:*:* Versions 2005 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:norton_antivirus:2006:*:*:*:*:*:*:* Versions 2006 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:norton_antivirus:2007:*:*:*:*:*:*:* Versions 2007 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:norton_antivirus:2008:*:*:*:*:*:*:* Versions 2008 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:norton_internet_security:2005:*:*:*:*:*:*:* Versions 2005 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:norton_internet_security:2006:*:*:*:*:*:*:* Versions 2006 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:norton_internet_security:2007:*:*:*:*:*:*:* Versions 2007 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:norton_internet_security:2008:*:*:*:*:*:*:* Versions 2008 Vulnerable ·Symantec

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2009-3104
  2. 2026-10-03 Alias added: GHSA-j4gj-mw2c-mqx6

References

Advisory 1

Other 2

  • TI-2009-01353 The Intel LANDesk Common Base Agent (CBA) in Symantec Alert Management System 2 (AMS2)… CVSS 2.0HIGH 10.0
  • TI-2009-01354 Multiple stack-based buffer overflows in IAO.EXE in the Intel Alert Originator Service in… CVSS 2.0HIGH 9.3
  • TI-2010-00106 HDNLRSVC.EXE in the Intel Alert Handler service (aka Symantec Intel Handler service) in… CVSS 2.0HIGH 9.3
  • TI-2010-00103 Buffer overflow in the cliproxy.objects.1 ActiveX control in the Symantec Client Proxy… CVSS 2.0HIGH 10.0
  • TI-2009-01355 XFR.EXE in the Intel File Transfer service in the console in Symantec Alert Management… CVSS 2.0HIGH 9.3
  • TI-2012-04190 The decomposer engine in Symantec Endpoint Protection (SEP) 11.0, Symantec Endpoint… CVSS 2.0HIGH 9.3
See all 14 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences