Python Site-Specific Hook Persistence

This module leverages Python's startup mechanism, where some files can be automically processed during the initialization of the Python interpreter. One of those files are startup hooks site-specific, dist-packages. If these files are present in site-specific or dist-packages directories, any lin...

CVE-2010-5169

Race condition in Online Armor Premium 4.0.0.35 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...

CVE-2010-5169

Race condition in Online Armor Premium 4.0.0.35 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...

PT-2012-1384 · Panda · Panda Internet Security

Name of the Vulnerable Software and Affected Versions: Panda Internet Security 2010 version 15.01.00 Description: A race condition in the software allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a handler but not blocked by...

PT-2012-1390 · Pc Tools · Threatfire

Name of the Vulnerable Software and Affected Versions: ThreatFire version 4.7.0.17 Description: A race condition issue allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detectio...

PT-2012-1388 · Unknown · Security Shield 2010

Name of the Vulnerable Software and Affected Versions: Security Shield 2010 version 13.0.16.313 Description: A race condition exists that allows local users to bypass kernel-mode hook handlers and execute dangerous code. This is achieved through certain user-space memory changes during hook-handl...

PT-2012-1383 · Agnitum · Outpost Security Suite Pro

Name of the Vulnerable Software and Affected Versions: Outpost Security Suite Pro versions 6.7.3.3063.452.0726 and 7.0.3330.505.1221 BETA Description: A race condition issue allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a...

PT-2012-1376 · Kingsoft · Kingsoft Personal Firewall 9 Plus

Name of the Vulnerable Software and Affected Versions: KingSoft Personal Firewall 9 Plus version 2009.05.07.70 Description: A race condition in the software allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a handler but not block...

PT-2012-1372 · Eset · Eset Smart Security

Name of the Vulnerable Software and Affected Versions: ESET Smart Security version 4.2.35.3 Description: A race condition in ESET Smart Security on Windows XP allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a handler but not...

PT-2012-1396 · Zonealarm · Zonealarm Extreme Security

Name of the Vulnerable Software and Affected Versions: ZoneAlarm Extreme Security version 9.1.507.000 Description: A race condition issue exists, allowing local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked. This is achieved through certain...

PT-2012-1386 · Prevx · Prevx

Name of the Vulnerable Software and Affected Versions: Prevx version 3.0.5.143 Description: A race condition exists that allows local users to bypass kernel-mode hook handlers and execute dangerous code. This is achieved through certain user-space memory changes during hook-handler execution. The...

PT-2012-1373 · F Secure · F-Secure Internet Security

Name of the Vulnerable Software and Affected Versions: F-Secure Internet Security 2010 version 10.00 build 246 Description: A race condition allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a handler but not blocked by...

PT-2012-1379 · Norman · Norman Security Suite

Name of the Vulnerable Software and Affected Versions: Norman Security Suite PRO version 8.0 Description: A race condition exists in the software, allowing local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked. This is achieved through certain...

PT-2012-1393 · Vipre · Vipre Antivirus Premium

Name of the Vulnerable Software and Affected Versions: VIPRE Antivirus Premium version 4.0.3272 Description: A race condition allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware...

PT-2012-1368 · Ca · Ca Internet Security Suite

Name of the Vulnerable Software and Affected Versions: CA Internet Security Suite Plus 2010 version 6.0.0.272 Description: A race condition allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a handler but not blocked by...

PT-2012-1394 · Virusbuster · Virusbuster Internet Security Suite

Name of the Vulnerable Software and Affected Versions: VirusBuster Internet Security Suite version 3.2 Description: A race condition issue allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a handler but not blocked by...

PT-2012-1389 · Sophos · Sophos Endpoint Security/Control

Name of the Vulnerable Software and Affected Versions: Sophos Endpoint Security and Control version 9.0.5 Description: A race condition exists that allows local users to bypass kernel-mode hook handlers and execute dangerous code. This is achieved through certain user-space memory changes during...

PT-2012-1370 · Defensewall · Defensewall Personal Firewall

Name of the Vulnerable Software and Affected Versions: DefenseWall Personal Firewall version 3.00 Description: A race condition in DefenseWall Personal Firewall on Windows XP allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a...

PT-2012-1366 · Bitdefender · Bitdefender Total Security

Name of the Vulnerable Software and Affected Versions: BitDefender Total Security 2010 version 13.0.20.347 Description: A race condition allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-base...

PT-2012-1395 · Webroot · Webroot Internet Security Essentials

Name of the Vulnerable Software and Affected Versions: Webroot Internet Security Essentials version 6.1.0.145 Description: A race condition exists that allows local users to bypass kernel-mode hook handlers and execute dangerous code. This is achieved through certain user-space memory changes...