CVE-2010-4502 Integer overflow in KmxSbx.sys 6.2.0.22 in CA Internet Security Suite Plus 2010 allows local users to cause a denial of service (pool corruption) and execute arbitrary code via crafted arguments to th...
HighCVSS 7.2
EPSS 1.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Integer overflow in KmxSbx.sys 6.2.0.22 in CA Internet Security Suite Plus 2010 allows local users to cause a denial of service (pool corruption) and execute arbitrary code via crafted arguments to the 0x88000080 IOCTL, which triggers a buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ca internet security suite plus 2010 | All versions | No fix listed |
References
- 42267 third-party-advisory vendor-advisory
- 15624 exploit
- 1024808 vdb-entry
- ADV-2010-3070 vdb-entry vendor-advisory