Ca Internet Security Suite 2010 vulnerabilities

2 CVEs affecting Ca Internet Security Suite 2010, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-5156, published 2012-08-25.

More from Ca.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2011-1036, published 2011-02-25. High severity, CVSS 8.8. EPSS: 2.5% chance of exploitation in the next 30 days. The XML Security Database Parser class in the XMLSecDB ActiveX control in the HIPSEngine component in the Management Server before 8.1.0.88, and the client before 1.6.450, in CA Host-Based Intrusion…
• CVE-2010-5156, published 2012-08-25. Medium severity, CVSS 6.2. EPSS: 0.3% chance of exploitation in the next 30 days. Race condition in CA Internet Security Suite Plus 2010 6.0.0.272 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a…