{"cve":"CVE-2004-0444","nvd":{"published":"2004-07-07T04:00:00.000","modified":"2026-06-16T22:05:38.813","status":"Modified","description":"Multiple vulnerabilities in SYMDNS.SYS for Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allow remote attackers to cause a denial of service or execute arbitrary code via (1) a manipulated length byte in the first-level decoding routine for NetBIOS Name Service (NBNS) that modifies an index variable and leads to a stack-based buffer overflow, (2) a heap-based corruption problem in an NBNS response that is missing certain RR fields, and (3) a stack-based buffer overflow in the DNS component via a Resource Record (RR) with a long canonical name (CNAME) field composed of many smaller components.","cvss_v4":null,"cvss_v3":null,"cwes":[],"references":["http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021360.html","http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021361.html","http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021362.html","http://secunia.com/advisories/11066","http://securityresponse.symantec.com/avcenter/security/Content/2004.05.12.html"],"products":["symantec:client_firewall","symantec:client_security","symantec:norton_antispam","symantec:norton_internet_security","symantec:norton_personal_firewall"],"source":"nvd","synced_at":"2026-10-19T19:37:11.487553034+00:00"},"epss":{"cve":"CVE-2004-0444","score":0.12798,"percentile":0.96286,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}