CVE-2010-5169

Race condition in Online Armor Premium 4.0.0.35 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...

CVE-2010-5170

Race condition in Online Solutions Security Suite 1.5.14905.0 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes...

CVE-2010-5160

Race condition in ESET Smart Security 4.2.35.3 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...

CVE-2010-5162

CVE-2010-5162 describes a race condition in G DATA TotalCare 2010 for Windows XP that allows local users to bypass kernel-mode hook handlers via certain user-space memory changes during hook-handler execution (an argument-switch or KHOBE attack). Affected software is G DATA TotalCare 2010; the ro...

CVE-2010-5154

Affected software: BitDefender Total Security 2010, version 13.0.20.347, on Windows XP. Vulnerability: a race condition during kernel-mode hook handling that lets local users bypass hook handlers and potentially run code that would otherwise be blocked by a handler, via certain user-space memory ...

CVE-2010-5174

Prevx 3.0.5.143 on Windows XP is affected by a race condition that lets local users bypass kernel-mode hook handlers and execute code that might evade signature-based malware detection, via certain user-space memory changes during hook-handler execution (KHOBE/argument-switch attack). The issue i...

CVE-2010-5155

Race condition in Blink Professional 4.6.1 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler...

CVE-2010-5177

CVE-2010-5177 involves Sophos Endpoint Security and Control on Windows XP (version 9.0.5). A race condition in kernel-mode hook handling permits local users to bypass hook handlers and run code that would be blocked by the handler but not by signature-based malware detection, via certain user-spa...

CVE-2010-5166

CVE-2010-5166 describes a race condition in McAfee Total Protection 2010 10.0.580 on Windows XP that allows local users to bypass kernel-mode hook handlers by making specific user-space memory changes during hook-handler execution (KHOBE/argument-switch attack). Affected component appears to be k...

CVE-2010-5184

Race condition in ZoneAlarm Extreme Security 9.1.507.000 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...

CVE-2010-5180

CVE-2010-5180 concerns a race condition in VBA32 Personal 3.12.12.4 on Windows XP that allows a local user to bypass kernel-mode hook handlers by performing certain user-space memory changes during hook-handler execution (KHOBE/argument-switch attack). Affected component: VBA32 Personal 3.12.12.4...

CVE-2010-5183

CVE-2010-5183 affects Webroot Internet Security Essentials 6.1.0.145 on Windows XP. The root cause is a race condition that lets local users bypass kernel-mode hook handlers and run code that could evade signature-based detection via certain user-space memory changes during hook-handler execution...

CVE-2010-5181

CVE-2010-5181 : A race condition in VIPRE Antivirus Premium 4.0.3272 for Windows XP lets local users bypass kernel-mode hook handlers and run code that would be blocked by the handler but not by signature-based detection, via certain user-space memory changes during hook-handler execution (KHOBE/...

CVE-2010-5176

Security Shield 2010 (version 13.0.16.313) on Windows XP is affected by a race condition (KHOBE) that lets local users bypass kernel-mode hook handlers and run code that would otherwise be blocked by a handler or signature checks. The root cause involves certain user-space memory changes during h...

CVE-2010-5172

CVE-2010-5172 involves a race condition in Panda Internet Security 2010 (version 15.01.00) on Windows XP that lets local users bypass kernel-mode hook handlers by making certain user-space memory changes during hook-handler execution (KHOBE/argument-switch attack). This can allow execution of cod...

CVE-2010-5170

CVE-2010-5170 affects Online Solutions Security Suite 1.5.14905.0 on Windows XP. A race condition during hook-handler execution allows local users to bypass kernel-mode hook handlers and run code that would otherwise be blocked by a handler but not by signature-based detection (KHOBE/argument-swi...

CVE-2010-5169

CVE-2010-5169 describes a race condition in Online Armor Premium 4.0.0.35 on Windows XP that lets local users bypass kernel-mode hook handlers and execute code blocked by the handler or by signature-based malware detection. The KHOBE/argument-switch attack relies on specific user-space memory cha...

CVE-2010-5165

CVE-2010-5165 concerns a race condition in Malware Defender 2.6.0 on Windows XP that allows local users to bypass kernel-mode hook handlers and execute code that signature-based malware detectors would not block, via certain user-space memory changes during hook-handler execution. This is describ...

CVE-2010-5163

Kaspersky Internet Security 2010 (9.0.0.736) on Windows XP is affected by a race condition that can bypass kernel-mode hook handlers and allow local code execution that evades signature-based detection (KHOBE/argument-switch attack). Root cause: exploiting certain user-space memory changes during...

CVE-2010-5157

CVE-2010-5157 affects Comodo Internet Security before 4.1.149672.916 on Windows XP. A race condition during hook-handler execution enables a local attacker to bypass kernel-mode hook handlers and run code that would be blocked by the handler but not by signature-based malware detection, via an ar...