CVEvulnerability

CVE-2011-1036

8.8 HIGH Published 2011-02-25 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-02-25
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
8.8 HIGH — AV:N/AC:M/Au:N/C:N/I:C/A:C

Description

The XML Security Database Parser class in the XMLSecDB ActiveX control in the HIPSEngine component in the Management Server before 8.1.0.88, and the client before 1.6.450, in CA Host-Based Intrusion Prevention System (HIPS) 8.1, as used in CA Internet Security Suite (ISS) 2010, allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via vectors involving the SetXml and Save methods.

Affected configurations

• ca host-based intrusion prevention system 8.1 • ca internet security suite 2010 • ca internet security suite 2011

References