CVE-2008-3174: Computer Associates Host Based Intrusion Prevention System

Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days.

Unspecified vulnerability in the kmxfw.sys driver in CA Host-Based Intrusion Prevention System (HIPS) r8, as used in CA Internet Security Suite and Personal Firewall, allows remote attackers to cause a denial of service via unknown vectors, related to "insufficient validation."

Affected products

• Computer Associates Host Based Intrusion Prevention System: version r8 only
• Computer Associates Internet Security Suite: version 2007 only; version 2008 only
• Computer Associates Personal Firewall: version 2007 only; version 2008 only

Published 2008-08-12. Last modified 2026-06-16.