CVE-2008-2926
No CVSS score yet. EPSS 0.4% chance of exploitation in the next 30 days.
The kmxfw.sys driver in CA Host-Based Intrusion Prevention System (HIPS) r8, as used in CA Internet Security Suite and Personal Firewall, does not properly verify IOCTL requests, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted request.
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 36% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- broadcom:internet_security_suite
- ca:host_based_intrusion_prevention_system
- ca:internet_security_suite_2008
- ca:personal_firewall_2007
- ca:personal_firewall_2008