Lucene search
HistoryOct 03, 2022 - 4:14 p.m.
CVE-2004-2147
cve-2004-2147
symantec
norton antivirus
microsoft outlook
denial of service
email security
nvd
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.9 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
33.4%
Unknown versions of Symantec Norton AntiVirus and Microsoft Outlook allow attackers to cause a denial of service (crash) via malformed e-mail messages (1) without a body or (2) without a carriage return (“\n”) separating the headers from the body.
Affected configurations
Node
symantecnorton_antivirusMatch2.1ms_exchange
ORsymantecnorton_antivirusMatch2001
ORsymantecnorton_antivirusMatch2002
ORsymantecnorton_antivirusMatch2003
ORsymantecnorton_antivirusMatchcorporate_7.0
ORsymantecnorton_antivirusMatchcorporate_7.2
ORsymantecnorton_antivirusMatchcorporate_7.5
ORsymantecnorton_antivirusMatchcorporate_7.6
ORsymantecnorton_antivirusMatchcorporate_7.51
ORsymantecnorton_antivirusMatchcorporate_7.60.build_926
ORsymantecnorton_antivirusMatchcorporate_7.61
ORsymantecnorton_antivirusMatchcorporate_8.0
ORsymantecnorton_antivirusMatchprofessional_2001
ORsymantecnorton_antivirusMatchprofessional_2002
ORsymantecnorton_antivirusMatchprofessional_2003
ORsymantecnorton_antivirusMatchprofessional_2004
References
Social References
More
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.9 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
33.4%
Related for CVE-2004-2147