CVE-2004-0363

CVE-2004-0363 describes a stack-based buffer overflow in the SymSpamHelper ActiveX component (symspam.dll) within Norton AntiSpam 2004, including its use in Norton Internet Security 2004. This vulnerability allows remote attackers to execute arbitrary code by providing a long parameter to the LaunchCustomRuleWizard method. With a CVSS score of 7.5 (High), it presents a critical risk due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, exploit code is publicly available via a Metasploit module, and the vulnerability has garnered significant community discussion, indicating a high likelihood of exploitation.