| Package | Affected versions | Patched versions |
|---|---|---|
| internet security suite | = 3.0 | |
| host based intrusion prevention system | = r8 |
The kmxfw.sys driver in CA Host-Based Intrusion Prevention System (HIPS) r8, as used in CA Internet Security Suite and Personal Firewall, does not properly verify IOCTL requests, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free