CA Host-Based Intrusion Prevention System SDK kmxfw.sys Multiple Vulnerabilities

Title: CA Host-Based Intrusion Prevention System SDK kmxfw.sys Multiple Vulnerabilities CA Advisory Date: 2008-08-11 Reported By: CVE-2008-2926 - Tobias Klein CVE-2008-3174 - Elazar Broad Impact: A remote attacker can cause a denial of service or possibly execute arbitrary code. Summary: CA...

CVE-2008-3174

CA HIPS Kmxfw.sys contains multiple vulnerabilities (CVE-2008-3174 and CVE-2008-2926) in the kmxfw.sys kernel driver used by CA HIPS r8, CA Internet Security Suite, and CA Personal Firewall. The issues arise from insufficient validation/verification of IOCTL requests, enabling a remote denial of ...