Computer Associates 'kmxfw.sys' Local Code Execution and Remote Denial of Service Vulnerabilities

Computer Associates 'kmxfw.sys' Local Code Execution and Remote Denial of Service Vulnerabilities

Computer Associates products are prone to two vulnerabilities.

Attackers may exploit the first vulnerability locally to execute arbitrary code with SYSTEM-level privileges or cause a system crash. Attackers may exploit the second vulnerability remotely to cause denial-of-service conditions.

Successful attacks will completely compromise the computer or cause denial-of-service conditions.

The following products are affected:

Computer Associates Host-Based Intrusion Prevention System r8
Computer Associates Internet Security Suite 2007
Computer Associates Internet Security Suite 2008
Computer Associates Personal Firewall 2007
Computer Associates Personal Firewall 2008