CVE-2010-4502

CVE-2010-4502 describes an integer overflow vulnerability in KmxSbx.sys 6.2.0.22 within CA Internet Security Suite Plus 2010. This flaw allows a local attacker to trigger a buffer overflow via crafted IOCTL arguments, leading to a denial of service (pool corruption) and potential arbitrary code execution. With a CVSS score of 7.2 (high severity) and a FAUCET Risk Score of 86/100, the vulnerability is easily exploitable locally with low attack complexity, enabling full compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog or actively exploited, public exploit code exists on ExploitDB, though there is no evidence of widespread community discussion or media coverage.