CVE-2010-5161

CVE-2010-5161 describes a race condition in F-Secure Internet Security 2010 (build 246) for Windows XP that allows local users to bypass kernel-mode hook handlers and execute code that would be blocked by a handler but not by signature-based malware detection. The underlying issue is a KHOBE/argu...

CVE-2010-5156

CVE-2010-5156 concerns CA Internet Security Suite Plus 2010, version 6.0.0.272 on Windows XP. A race condition allows local attackers to bypass kernel‑mode hook handlers and run code that could evade signature‑based detection, via user‑space memory changes during hook‑handler execution (KHOBE/arg...

CVE-2010-5151

Race condition in avast! Internet Security 5.0.462 on Windows XP allows local users to bypass kernel-mode hook handlers by manipulating user-space memory during hook-handler execution (KHOBE/argument-switch attack). This may enable execution of code that would bypass signature-based malware detec...

CVE-2010-5164

Race condition in KingSoft Personal Firewall 9 Plus 2009.05.07.70 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory chang...

CVE-2010-5175

CVE-2010-5175 affects PrivateFirewall 7.0.20.37 on Windows XP. A race condition in the product allows local users to bypass kernel-mode hook handlers via certain user-space memory changes during hook-handler execution, an issue also described as an argument-switch or KHOBE attack. This bypass cou...

CVE-2010-5160

Race condition in ESET Smart Security 4.2.35.3 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...

CVE-2010-5157

CVE-2010-5157 affects Comodo Internet Security before 4.1.149672.916 on Windows XP. A race condition during hook-handler execution enables a local attacker to bypass kernel-mode hook handlers and run code that would be blocked by the handler but not by signature-based malware detection, via an ar...

CVE-2010-5170

CVE-2010-5170 affects Online Solutions Security Suite 1.5.14905.0 on Windows XP. A race condition during hook-handler execution allows local users to bypass kernel-mode hook handlers and run code that would otherwise be blocked by a handler but not by signature-based detection (KHOBE/argument-swi...

CVE-2010-5167

CVE-2010-5167 affects Norman Security Suite PRO 8.0 on Windows XP. It describes a race condition that lets local attackers bypass kernel-mode hook handlers by specific user-space memory changes during hook-handler execution (KHOBE attack), potentially enabling code execution blocked by handlers b...

CVE-2010-5159

CVE-2010-5159 describes a race condition in Dr.Web Security Space Pro 6.0.0.03100 on Windows XP that allows local users to bypass kernel-mode hook handlers and run code that would otherwise be blocked by a handler, via certain user-space memory changes during hook-handler execution (KHOBE/argumen...

CVE-2010-5154

Race condition in BitDefender Total Security 2010 13.0.20.347 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes...

CVE-2010-5157

Race condition in Comodo Internet Security before 4.1.149672.916 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory change...

CVE-2010-5160

The CVE-2010-5160 entry concerns ESET Smart Security 4.2.35.3 on Windows XP . It describes a race condition that allows local users to bypass kernel-mode hook handlers and run code that would otherwise be blocked by a handler, via certain user-space memory changes during hook-handler execution, r...

CVE-2010-5181

Race condition in VIPRE Antivirus Premium 4.0.3272 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...

CVE-2010-5174

Prevx 3.0.5.143 on Windows XP is affected by a race condition that lets local users bypass kernel-mode hook handlers and execute code that might evade signature-based malware detection, via certain user-space memory changes during hook-handler execution (KHOBE/argument-switch attack). The issue i...

CVE-2010-5165

Race condition in Malware Defender 2.6.0 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler...

CVE-2010-5158

Race condition in DefenseWall Personal Firewall 3.00 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...

CVE-2010-5180

Race condition in VBA32 Personal 3.12.12.4 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler...

CVE-2010-5168

Race condition in Symantec Norton Internet Security 2010 17.5.0.127 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory...

CVE-2010-5184

Race condition in ZoneAlarm Extreme Security 9.1.507.000 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...