Multiple Vulnerabilities in Symantec Norton Internet Security and Firewall Products

CVE-2004-0444

What is CVE-2004-0444?

Multiple vulnerabilities in SYMDNS.SYS components of Symantec Norton Internet Security and Firewall products may allow remote attackers to exploit denial of service conditions or execute arbitrary code. This can occur through manipulated length bytes during the NetBIOS Name Service (NBNS) decoding process, which may result in stack-based buffer overflow and the exploitation of heap corruption due to improperly formatted NBNS responses. Additionally, a particular attack vector involving excessively long canonical name fields in DNS responses further exacerbates these vulnerabilities, presenting significant security risks to users of the affected products.

References