PT-2004-1948 · Symantec · Symantec Norton Antivirus

Published 2004-10-06 · Updated 2017-07-11 · CVE-2004-0920

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Symantec Norton AntiVirus versions 2004 and earlier

Description: The issue allows a virus or other malicious code to avoid detection or cause a denial of service, resulting in an application crash, by utilizing a filename that contains an MS-DOS device name.

Recommendations: For Symantec Norton AntiVirus versions 2004 and earlier, consider updating to a newer version that addresses this issue, as the current version may allow malicious code to evade detection or cause the application to crash.

Fix

Related Identifiers

CVE-2004-0920

Affected Products

Symantec Norton Antivirus

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2004-0920 · Security Note
• http://idefense.com/application/poi/display?id=147&type=vulnerabilities · Note
• http://seifried.org/security/advisories/kssa-010.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17603 · Note