VULNERABILITY INTELLIGENCE
CVE-2008-2926
CVSS score7.2 HIGH
EPSS probability0.42%
CISA KEVNot currently listed
Published2008-08-12
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C
Description
The kmxfw.sys driver in CA Host-Based Intrusion Prevention System (HIPS) r8, as used in CA Internet Security Suite and Personal Firewall, does not properly verify IOCTL requests, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted request.
Weakness classification
- CWE-20: Improper Input Validation