ID CVE-2004-2147
Summary Unknown versions of Symantec Norton AntiVirus and Microsoft Outlook allow attackers to cause a denial of service (crash) via malformed e-mail messages (1) without a body or (2) without a carriage return ("\n") separating the headers from the body.
References
Vulnerable Configurations
  • cpe:2.3:a:symantec:norton_antivirus:2.1:*:ms_exchange:*:*:*:*:*
    cpe:2.3:a:symantec:norton_antivirus:2.1:*:ms_exchange:*:*:*:*:*
  • cpe:2.3:a:symantec:norton_antivirus:2001:*:*:*:*:*:*:*
    cpe:2.3:a:symantec:norton_antivirus:2001:*:*:*:*:*:*:*
  • cpe:2.3:a:symantec:norton_antivirus:2002:*:*:*:*:*:*:*
    cpe:2.3:a:symantec:norton_antivirus:2002:*:*:*:*:*:*:*
  • cpe:2.3:a:symantec:norton_antivirus:2003:*:*:*:*:*:*:*
    cpe:2.3:a:symantec:norton_antivirus:2003:*:*:*:*:*:*:*
  • cpe:2.3:a:symantec:norton_antivirus:corporate_7.0:*:*:*:*:*:*:*
    cpe:2.3:a:symantec:norton_antivirus:corporate_7.0:*:*:*:*:*:*:*
  • cpe:2.3:a:symantec:norton_antivirus:corporate_7.2:*:*:*:*:*:*:*
    cpe:2.3:a:symantec:norton_antivirus:corporate_7.2:*:*:*:*:*:*:*
  • cpe:2.3:a:symantec:norton_antivirus:corporate_7.5:*:*:*:*:*:*:*
    cpe:2.3:a:symantec:norton_antivirus:corporate_7.5:*:*:*:*:*:*:*
  • cpe:2.3:a:symantec:norton_antivirus:corporate_7.6:*:*:*:*:*:*:*
    cpe:2.3:a:symantec:norton_antivirus:corporate_7.6:*:*:*:*:*:*:*
  • cpe:2.3:a:symantec:norton_antivirus:corporate_7.51:*:*:*:*:*:*:*
    cpe:2.3:a:symantec:norton_antivirus:corporate_7.51:*:*:*:*:*:*:*
  • cpe:2.3:a:symantec:norton_antivirus:corporate_7.60.build_926:*:*:*:*:*:*:*
    cpe:2.3:a:symantec:norton_antivirus:corporate_7.60.build_926:*:*:*:*:*:*:*
  • cpe:2.3:a:symantec:norton_antivirus:corporate_7.61:*:*:*:*:*:*:*
    cpe:2.3:a:symantec:norton_antivirus:corporate_7.61:*:*:*:*:*:*:*
  • cpe:2.3:a:symantec:norton_antivirus:corporate_8.0:*:*:*:*:*:*:*
    cpe:2.3:a:symantec:norton_antivirus:corporate_8.0:*:*:*:*:*:*:*
  • cpe:2.3:a:symantec:norton_antivirus:professional_2001:*:*:*:*:*:*:*
    cpe:2.3:a:symantec:norton_antivirus:professional_2001:*:*:*:*:*:*:*
  • cpe:2.3:a:symantec:norton_antivirus:professional_2002:*:*:*:*:*:*:*
    cpe:2.3:a:symantec:norton_antivirus:professional_2002:*:*:*:*:*:*:*
  • cpe:2.3:a:symantec:norton_antivirus:professional_2003:*:*:*:*:*:*:*
    cpe:2.3:a:symantec:norton_antivirus:professional_2003:*:*:*:*:*:*:*
  • cpe:2.3:a:symantec:norton_antivirus:professional_2004:*:*:*:*:*:*:*
    cpe:2.3:a:symantec:norton_antivirus:professional_2004:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 05-09-2008 - 20:43)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
refmap via4
bid 11259
vuln-dev 20040925 No body emails and Norton antivirus
Last major update 05-09-2008 - 20:43
Published 31-12-2004 - 05:00
Last modified 05-09-2008 - 20:43
Back to Top