← Vulnerability feed

Vulnerability record · CVE-2008-2926 · published 12 August 2008

CVE-2008-2926: Broadcom internet security suite improper input validation vulnerability

Broadcom · Internet Security Suite

The kmxfw.sys driver in CA Host-Based Intrusion Prevention System (HIPS) r8, as used in CA Internet Security Suite and Personal Firewall, does not properly verify IOCTL requests, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted request.

7.2 CVSS 2.0 High EPSS 0.42% · top 65.8% CWE-20 · Improper input validation
7.2CVSS 2.0 base score
0.42%EPSS exploitation probability, 30 days
NoNot in CISA KEV
5Affected product versions listed by NVD
18References
16 Jun 2026Last modified by NVD

Description

The kmxfw.sys driver in CA Host-Based Intrusion Prevention System (HIPS) r8, as used in CA Internet Security Suite and Personal Firewall, does not properly verify IOCTL requests, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted request.

AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected products

5 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/31434 PatchVendor Advisory
http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=36559
http://www.securityfocus.com/archive/1/495397/100/0/threaded
http://www.securityfocus.com/bid/30651
http://www.securitytracker.com/id?1020658
http://www.securitytracker.com/id?1020659
http://www.securitytracker.com/id?1020660
http://www.vupen.com/english/advisories/2008/2339
https://exchange.xforce.ibmcloud.com/vulnerabilities/44392
http://secunia.com/advisories/31434 PatchVendor Advisory
http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=36559
http://www.securityfocus.com/archive/1/495397/100/0/threaded
http://www.securityfocus.com/bid/30651
http://www.securitytracker.com/id?1020658
http://www.securitytracker.com/id?1020659
http://www.securitytracker.com/id?1020660
http://www.vupen.com/english/advisories/2008/2339
https://exchange.xforce.ibmcloud.com/vulnerabilities/44392

Track CVE-2008-2926 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2009-0042Broadcom anti-spyware vulnerabilityMultiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for CA Anti-Virus for the Enterpr…EPSS 4.3%9.3CVE-2009-3587Broadcom anti-virus vulnerabilityUnspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 throug…EPSS 7.6%9.3CVE-2007-2864CA Anti-Virus engine stack buffer overflow via crafted CAB fileThe Anti-Virus engine in multiple CA (Computer Associates) products before content update 30.6 has a stack-based buffer overflow triggered by a large…EPSS 50%analysed6.6CVE-2006-6496Broadcom etrust antivirus vulnerabilityThe (1) VetMONNT.sys and (2) VetFDDNT.sys drivers in CA Anti-Virus 2007 8.1, Anti-Virus for Vista Beta 8.2, and CA Internet Security Suite 2007 v3.0 …EPSS 0.38%4.3CVE-2009-3588Broadcom anti-virus vulnerabilityUnspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 throug…EPSS 2.4%4.3CVE-2007-3875Broadcom anti-spyware vulnerabilityarclib.dll before 7.3.0.9 in CA Anti-Virus (formerly eTrust Antivirus) 8 and certain other CA products allows remote attackers to cause a denial of s…EPSS 3.5%9.5CVE-2026-88771Citrix NetScaler Improper Input Validation VulnerabilityImproper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-…KEV9.5CVE-2026-93952Arista velocloud orchestrator improper input validation vulnerabilityVeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality an…KEVEPSS 0.90%

Source: NIST National Vulnerability Database (record CVE-2008-2926), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.