CVE-2008-3174

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-08-12 · updated 2026-06-16

Description

Unspecified vulnerability in the kmxfw.sys driver in CA Host-Based Intrusion Prevention System (HIPS) r8, as used in CA Internet Security Suite and Personal Firewall, allows remote attackers to cause a denial of service via unknown vectors, related to "insufficient validation."

Affected products

Computer Associates Host Based Intrusion Prevention System: r8
Computer Associates Internet Security Suite: 2007, 2008
Computer Associates Personal Firewall: 2007, 2008

References

http://secunia.com/advisories/31434
http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=36560
http://www.securityfocus.com/archive/1/495397/100/0/threaded
http://www.securityfocus.com/bid/30651
http://www.securitytracker.com/id?1020661
http://www.securitytracker.com/id?1020662
http://www.securitytracker.com/id?1020663
http://www.vupen.com/english/advisories/2008/2339
https://exchange.xforce.ibmcloud.com/vulnerabilities/44393
http://secunia.com/advisories/31434
http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=36560
http://www.securityfocus.com/archive/1/495397/100/0/threaded

Get alerted when CVE-2008-3174 or the next vulnerability affects your stack