CVE-2008-2926: Broadcom Internet Security Suite

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

The kmxfw.sys driver in CA Host-Based Intrusion Prevention System (HIPS) r8, as used in CA Internet Security Suite and Personal Firewall, does not properly verify IOCTL requests, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted request.

Affected products

• Broadcom Internet Security Suite: version 3.0 only
• Ca Host Based Intrusion Prevention System: version r8 only
• Ca Internet Security Suite 2008: any version
• Ca Personal Firewall 2007: any version
• Ca Personal Firewall 2008: any version

Published 2008-08-12. Last modified 2026-06-16.