CVE-2010-5153

CVE-2010-5153 details a race condition in Avira Premium Security Suite 10.0.0.536 on Windows XP that can bypass kernel‑mode hook handlers and allow local code execution during hook‑handler execution (KHOBE/argument‑switch attack). Documents confirm affected software and root cause (memory changes...

CVE-2010-5169

A race condition exists in Online Armor Premium version 4.0.0.35 on Windows XP , enabling local users to perform an argument-switch attack (or KHOBE attack ). By making specific user-space memory changes during hook-handler execution, an attacker can bypass kernel-mode hook handlers to execute da...

CVE-2010-5152

CVE-2010-5152 concerns AVG Internet Security 9.0.791 on Windows XP. It describes a race condition enabling local users to bypass kernel‑mode hook handlers by making certain user‑space memory changes during hook‑handler execution, known as an argument‑switch or KHOBE attack. Some third parties dis...

CVE-2010-5168

CVE-2010-5168 describes a race condition in Symantec Norton Internet Security 2010 (version 17.5.0.127) on Windows XP that allows local users to bypass kernel-mode hook handlers and run code that would normally be blocked by a hook, via certain user-space memory changes during hook-handler execut...

CVE-2010-5159

A race condition exists in Dr.Web Security Space Pro version 6.0.0.03100 on Windows XP . This vulnerability, also known as an argument-switch attack or KHOBE attack , allows local users to bypass kernel-mode hook handlers by making specific user-space memory changes during hook-handler execution....

CVE-2010-5166

CVE-2010-5166 describes a race condition in McAfee Total Protection 2010 10.0.580 on Windows XP that allows local users to bypass kernel-mode hook handlers by making specific user-space memory changes during hook-handler execution (KHOBE/argument-switch attack). Affected component appears to be k...

CVE-2010-5158

CVE-2010-5158 (DefenseWall Personal Firewall 3.00 on Windows XP) is a race condition that can bypass kernel-mode hook handlers by manipulating user-space memory during hook-handler execution, enabling code execution that may evade signature-based detection. The Red Hat and NVD entries confirm the...

PT-2012-1365 · Avira · Avira Premium Security Suite

Name of the Vulnerable Software and Affected Versions: Avira Premium Security Suite version 10.0.0.536 Description: A race condition in the software allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a handler but not blocked by...

PT-2012-1374 · G Data · G Data Totalcare

Name of the Vulnerable Software and Affected Versions: G DATA TotalCare version 2010 Description: A race condition in G DATA TotalCare 2010 on Windows XP allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a handler but not blocked ...

PT-2012-1391 · Trend Micro · Trend Micro Internet Security Pro

Name of the Vulnerable Software and Affected Versions: Trend Micro Internet Security Pro 2010 version 17.50.1647.0000 Description: A race condition issue allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a handler but not blocked ...

PT-2012-1362 · 3D · 3D Eqsecure Professional Edition

Name of the Vulnerable Software and Affected Versions: 3D EQSecure Professional Edition version 4.2 Description: A race condition in the software allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a handler but not blocked by...

PT-2012-1363 · Avast · Avast Internet Security

Name of the Vulnerable Software and Affected Versions: avast! Internet Security version 5.0.462 Description: A race condition in avast! Internet Security allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a handler but not blocked ...

PT-2012-1377 · Unknown · Malware Defender

Name of the Vulnerable Software and Affected Versions: Malware Defender version 2.6.0 Description: A race condition issue allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware...

PT-2012-1375 · Kaspersky · Kaspersky Internet Security

Name of the Vulnerable Software and Affected Versions: Kaspersky Internet Security 2010 version 9.0.0.736 Description: A race condition allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based...

PT-2012-1364 · Avg · Avg Internet Security

Name of the Vulnerable Software and Affected Versions: AVG Internet Security version 9.0.791 Description: A race condition in AVG Internet Security allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a handler but not blocked by...

PT-2012-1367 · Blink · Blink Professional

Name of the Vulnerable Software and Affected Versions: Blink Professional version 4.6.1 Description: A race condition in Blink Professional on Windows XP allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a handler but not blocked ...

PT-2012-1381 · Tallemu · Online Armor Premium

Name of the Vulnerable Software and Affected Versions: Online Armor Premium version 4.0.0.35 Description: A race condition in Online Armor Premium on Windows XP allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a handler but not...

CVE-2010-5157: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in Comodo Internet Security before 4.1.149672.916 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory change...

CVE-2010-5153: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in Avira Premium Security Suite 10.0.0.536 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes durin...

CVE-2010-5170: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in Online Solutions Security Suite 1.5.14905.0 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes...