EUVD-2009-4184

Malware in sbrugna...

Race condition

Race condition in F-Secure Internet Security 2010 10.00 build 246 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory chang...

CVE-2010-5161

Race condition in F-Secure Internet Security 2010 10.00 build 246 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory chang...

CVE-2010-5172

CVE-2010-5172 involves a race condition in Panda Internet Security 2010 (version 15.01.00) on Windows XP that lets local users bypass kernel-mode hook handlers by making certain user-space memory changes during hook-handler execution (KHOBE/argument-switch attack). This can allow execution of cod...

CVE-2010-5163: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in Kaspersky Internet Security 2010 9.0.0.736 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes...

CVE-2010-5172: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in Panda Internet Security 2010 15.01.00 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...

CVE-2010-5161: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in F-Secure Internet Security 2010 10.00 build 246 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory chang...

CVE-2010-5168: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in Symantec Norton Internet Security 2010 17.5.0.127 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory...

CVE-2010-1425: Undefined Security Weakness

F-Secure Internet Security 2010 and earlier; Anti-Virus for Microsoft Exchange 9 and earlier, and for MIMEsweeper 5.61 and earlier; Internet Gatekeeper for Windows 6.61 and earlier, and for Linux 4.02 and earlier; Anti-Virus 2010 and earlier; Home Server Security 2009; Protection Service for...

CVE-2009-4215

Panda Global Protection 2010, Internet Security 2010, and Antivirus Pro 2010 use weak permissions Everyone: Full Control for the product files, which allows local users to gain privileges by replacing executables with Trojan horse programs...

CVE-2009-4215: Undefined Security Weakness

Panda Global Protection 2010, Internet Security 2010, and Antivirus Pro 2010 use weak permissions Everyone: Full Control for the product files, which allows local users to gain privileges by replacing executables with Trojan horse programs...

CVE-2009-2647: Undefined Security Weakness

Unspecified vulnerability in Kaspersky Anti-Virus 2010 and Kaspersky Internet Security 2010 before Critical Fix 9.0.0.463 allows remote attackers to disable the Kaspersky application via unknown attack vectors unrelated to "an external script."...