CVE-2010-5160

The CVE-2010-5160 entry concerns ESET Smart Security 4.2.35.3 on Windows XP . It describes a race condition that allows local users to bypass kernel-mode hook handlers and run code that would otherwise be blocked by a handler, via certain user-space memory changes during hook-handler execution, r...

CVE-2010-5174

Prevx 3.0.5.143 on Windows XP is affected by a race condition that lets local users bypass kernel-mode hook handlers and execute code that might evade signature-based malware detection, via certain user-space memory changes during hook-handler execution (KHOBE/argument-switch attack). The issue i...

CVE-2010-5167

Race condition in Norman Security Suite PRO 8.0 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...

CVE-2010-5165

Race condition in Malware Defender 2.6.0 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler...

CVE-2010-5151

Race condition in avast! Internet Security 5.0.462 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...

CVE-2010-5168

CVE-2010-5168 describes a race condition in Symantec Norton Internet Security 2010 (version 17.5.0.127) on Windows XP that allows local users to bypass kernel-mode hook handlers and run code that would normally be blocked by a hook, via certain user-space memory changes during hook-handler execut...

CVE-2010-5180

Race condition in VBA32 Personal 3.12.12.4 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler...

PT-2012-1381 · Tallemu · Online Armor Premium

Name of the Vulnerable Software and Affected Versions: Online Armor Premium version 4.0.0.35 Description: A race condition in Online Armor Premium on Windows XP allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a handler but not...

PT-2012-1365 · Avira · Avira Premium Security Suite

Name of the Vulnerable Software and Affected Versions: Avira Premium Security Suite version 10.0.0.536 Description: A race condition in the software allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a handler but not blocked by...

PT-2012-1377 · Unknown · Malware Defender

Name of the Vulnerable Software and Affected Versions: Malware Defender version 2.6.0 Description: A race condition issue allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware...

PT-2012-1362 · 3D · 3D Eqsecure Professional Edition

Name of the Vulnerable Software and Affected Versions: 3D EQSecure Professional Edition version 4.2 Description: A race condition in the software allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a handler but not blocked by...

PT-2012-1375 · Kaspersky · Kaspersky Internet Security

Name of the Vulnerable Software and Affected Versions: Kaspersky Internet Security 2010 version 9.0.0.736 Description: A race condition allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based...

PT-2012-1367 · Blink · Blink Professional

Name of the Vulnerable Software and Affected Versions: Blink Professional version 4.6.1 Description: A race condition in Blink Professional on Windows XP allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a handler but not blocked ...

PT-2012-1391 · Trend Micro · Trend Micro Internet Security Pro

Name of the Vulnerable Software and Affected Versions: Trend Micro Internet Security Pro 2010 version 17.50.1647.0000 Description: A race condition issue allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a handler but not blocked ...

PT-2012-1364 · Avg · Avg Internet Security

Name of the Vulnerable Software and Affected Versions: AVG Internet Security version 9.0.791 Description: A race condition in AVG Internet Security allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a handler but not blocked by...

PT-2012-1363 · Avast · Avast Internet Security

Name of the Vulnerable Software and Affected Versions: avast! Internet Security version 5.0.462 Description: A race condition in avast! Internet Security allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a handler but not blocked ...

PT-2012-1374 · G Data · G Data Totalcare

Name of the Vulnerable Software and Affected Versions: G DATA TotalCare version 2010 Description: A race condition in G DATA TotalCare 2010 on Windows XP allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a handler but not blocked ...

PT-2012-1380 · Symantec · Symantec Norton Internet Security

Name of the Vulnerable Software and Affected Versions: Symantec Norton Internet Security 2010 version 17.5.0.127 Description: A race condition issue allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a handler but not blocked by...

CVE-2012-1893

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate callback parameters during creation of a hook procedure, which allows local users t...

Integer overflow

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate callback parameters during creation of a hook procedure, which allows local users t...