CVE-2010-5165

CVE-2010-5165 concerns a race condition in Malware Defender 2.6.0 on Windows XP that allows local users to bypass kernel-mode hook handlers and execute code that signature-based malware detectors would not block, via certain user-space memory changes during hook-handler execution. This is describ...

CVE-2010-5183

CVE-2010-5183 affects Webroot Internet Security Essentials 6.1.0.145 on Windows XP. The root cause is a race condition that lets local users bypass kernel-mode hook handlers and run code that could evade signature-based detection via certain user-space memory changes during hook-handler execution...

CVE-2010-5178

ThreatFire 4.7.0.17 on Windows XP is affected by a race-condition vulnerability that can bypass kernel-mode hook handlers via KHOBE/argument-switch memory changes during hook execution, allowing local code execution that could evade signature-based detection. Affected component: ThreatFire’s hook...

CVE-2010-5173

CVE-2010-5173 concerns a race condition in PC Tools Firewall Plus 6.0.0.88 on Windows XP that could allow local users to bypass kernel-mode hook handlers by manipulating user-space memory during hook-handler execution (KHOBE/argument-switch attack). Red Hat and other sources corroborate a local-a...

CVE-2010-5161

CVE-2010-5161 describes a race condition in F-Secure Internet Security 2010 (build 246) for Windows XP that allows local users to bypass kernel-mode hook handlers and execute code that would be blocked by a handler but not by signature-based malware detection. The underlying issue is a KHOBE/argu...

CVE-2010-5156

CVE-2010-5156 concerns CA Internet Security Suite Plus 2010, version 6.0.0.272 on Windows XP. A race condition allows local attackers to bypass kernel‑mode hook handlers and run code that could evade signature‑based detection, via user‑space memory changes during hook‑handler execution (KHOBE/arg...

CVE-2010-5151

Race condition in avast! Internet Security 5.0.462 on Windows XP allows local users to bypass kernel-mode hook handlers by manipulating user-space memory during hook-handler execution (KHOBE/argument-switch attack). This may enable execution of code that would bypass signature-based malware detec...

CVE-2010-5175

Race condition in PrivateFirewall 7.0.20.37 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler...

CVE-2010-5162

Race condition in G DATA TotalCare 2010 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler...

CVE-2010-5170

Race condition in Online Solutions Security Suite 1.5.14905.0 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes...

CVE-2010-5177

Race condition in Sophos Endpoint Security and Control 9.0.5 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes...

CVE-2010-5152

Race condition in AVG Internet Security 9.0.791 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...

CVE-2010-5153

Race condition in Avira Premium Security Suite 10.0.0.536 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes durin...

CVE-2010-5163

Race condition in Kaspersky Internet Security 2010 9.0.0.736 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes...

CVE-2010-5164

Race condition in KingSoft Personal Firewall 9 Plus 2009.05.07.70 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory chang...

CVE-2010-5173

Race condition in PC Tools Firewall Plus 6.0.0.88 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...

CVE-2010-5169

Race condition in Online Armor Premium 4.0.0.35 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...

CVE-2010-5166

Race condition in McAfee Total Protection 2010 10.0.580 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...

CVE-2010-5177

CVE-2010-5177 involves Sophos Endpoint Security and Control on Windows XP (version 9.0.5). A race condition in kernel-mode hook handling permits local users to bypass hook handlers and run code that would be blocked by the handler but not by signature-based malware detection, via certain user-spa...

CVE-2010-5174

Race condition in Prevx 3.0.5.143 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler execution...