Lucene search
MitreCVE-2010-4502HistoryDec 08, 2010 - 8:00 p.m.
CVE-2010-4502
2010-12-0820:00:04
CWE-189
mitre
web.nvd.nist.gov
25
cve-2010-4502
kmxsbx.sys
ca internet security suite plus
buffer overflow
denial of service
pool corruption
nvd
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.9
Confidence
High
EPSS
0.001
Percentile
20.2%
Integer overflow in KmxSbx.sys 6.2.0.22 in CA Internet Security Suite Plus 2010 allows local users to cause a denial of service (pool corruption) and execute arbitrary code via crafted arguments to the 0x88000080 IOCTL, which triggers a buffer overflow.
Affected configurations
Node
cainternet_security_suite_plus_2010
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ca | internet_security_suite_plus_2010 | * | cpe:2.3:a:ca:internet_security_suite_plus_2010:*:*:*:*:*:*:*:* |
Related
exploitdb
exploitdb
openvas
openvas
CA Internet Security Suite Plus 'KmxSbx.sys' Buffer Overflow Vulnerability
2011-02-05 00:00:00
CA Internet Security Suite Plus 'KmxSbx.sys' Buffer Overflow Vulnerability
2011-02-05 00:00:00
prion
prion
Integer overflow
2010-12-08 20:00:00
cvelist
cvelist
CVE-2010-4502
2010-12-08 19:00:00
nvd
nvd
CVE-2010-4502
2010-12-08 20:00:04
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.9
Confidence
High
EPSS
0.001
Percentile
20.2%
Related for CVE-2010-4502