CVE-2010-5181

Race condition in VIPRE Antivirus Premium 4.0.3272 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...

CVE-2010-5182

Race condition in VirusBuster Internet Security Suite 3.2 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes durin...

CVE-2010-5183

Race condition in Webroot Internet Security Essentials 6.1.0.145 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory change...

CVE-2010-5166

CVE-2010-5166 describes a race condition in McAfee Total Protection 2010 10.0.580 on Windows XP that allows local users to bypass kernel-mode hook handlers by making specific user-space memory changes during hook-handler execution (KHOBE/argument-switch attack). Affected component appears to be k...

CVE-2010-5180

CVE-2010-5180 concerns a race condition in VBA32 Personal 3.12.12.4 on Windows XP that allows a local user to bypass kernel-mode hook handlers by performing certain user-space memory changes during hook-handler execution (KHOBE/argument-switch attack). Affected component: VBA32 Personal 3.12.12.4...

CVE-2010-5183

CVE-2010-5183 affects Webroot Internet Security Essentials 6.1.0.145 on Windows XP. The root cause is a race condition that lets local users bypass kernel-mode hook handlers and run code that could evade signature-based detection via certain user-space memory changes during hook-handler execution...

CVE-2010-5181

CVE-2010-5181 : A race condition in VIPRE Antivirus Premium 4.0.3272 for Windows XP lets local users bypass kernel-mode hook handlers and run code that would be blocked by the handler but not by signature-based detection, via certain user-space memory changes during hook-handler execution (KHOBE/...

CVE-2010-5170

CVE-2010-5170 affects Online Solutions Security Suite 1.5.14905.0 on Windows XP. A race condition during hook-handler execution allows local users to bypass kernel-mode hook handlers and run code that would otherwise be blocked by a handler but not by signature-based detection (KHOBE/argument-swi...

CVE-2010-5169

CVE-2010-5169 describes a race condition in Online Armor Premium 4.0.0.35 on Windows XP that lets local users bypass kernel-mode hook handlers and execute code blocked by the handler or by signature-based malware detection. The KHOBE/argument-switch attack relies on specific user-space memory cha...

CVE-2010-5160

The CVE-2010-5160 entry concerns ESET Smart Security 4.2.35.3 on Windows XP . It describes a race condition that allows local users to bypass kernel-mode hook handlers and run code that would otherwise be blocked by a handler, via certain user-space memory changes during hook-handler execution, r...

CVE-2010-5159

CVE-2010-5159 describes a race condition in Dr.Web Security Space Pro 6.0.0.03100 on Windows XP that allows local users to bypass kernel-mode hook handlers and run code that would otherwise be blocked by a handler, via certain user-space memory changes during hook-handler execution (KHOBE/argumen...

CVE-2010-5155

CVE-2010-5155 concerns a race condition in Blink Professional 4.6.1 on Windows XP that allows local users to bypass kernel‑mode hook handlers by making certain user‑space memory changes during hook‑handler execution (an argument-switch or KHOBE attack). The vulnerability can enable execution of c...

CVE-2010-5151

Race condition in avast! Internet Security 5.0.462 on Windows XP allows local users to bypass kernel-mode hook handlers by manipulating user-space memory during hook-handler execution (KHOBE/argument-switch attack). This may enable execution of code that would bypass signature-based malware detec...

CVE-2010-5150

The vulnerability CVE-2010-5150 affects 3D EQSecure Professional Edition 4.2 on Windows XP. A race condition in the software allows local attackers to bypass kernel‑mode hook handlers and execute code that would ordinarily be blocked by a handler, via certain user‑space memory changes during hook...

CVE-2010-5184

CVE-2010-5184 describes a race condition in ZoneAlarm Extreme Security 9.1.507.000 on Windows XP that allows local users to bypass kernel-mode hook handlers and run code that could evade signature-based detection, via certain user-space memory changes during hook-handler execution (KHOBE/argument...

CVE-2010-5175

CVE-2010-5175 affects PrivateFirewall 7.0.20.37 on Windows XP. A race condition in the product allows local users to bypass kernel-mode hook handlers via certain user-space memory changes during hook-handler execution, an issue also described as an argument-switch or KHOBE attack. This bypass cou...

CVE-2010-5173

CVE-2010-5173 concerns a race condition in PC Tools Firewall Plus 6.0.0.88 on Windows XP that could allow local users to bypass kernel-mode hook handlers by manipulating user-space memory during hook-handler execution (KHOBE/argument-switch attack). Red Hat and other sources corroborate a local-a...

CVE-2010-5168

CVE-2010-5168 describes a race condition in Symantec Norton Internet Security 2010 (version 17.5.0.127) on Windows XP that allows local users to bypass kernel-mode hook handlers and run code that would normally be blocked by a hook, via certain user-space memory changes during hook-handler execut...

CVE-2010-5167

CVE-2010-5167 affects Norman Security Suite PRO 8.0 on Windows XP. It describes a race condition that lets local attackers bypass kernel-mode hook handlers by specific user-space memory changes during hook-handler execution (KHOBE attack), potentially enabling code execution blocked by handlers b...

CVE-2010-5164

The connected PT-2012-1376 entry confirms a concrete vulnerability in Kingsoft Personal Firewall 9 Plus, version 2009.05.07.70 on Windows XP: a race condition that enables local users to bypass kernel-mode hook handlers and execute code that would otherwise be blocked by handlers, via user-space ...