CVE-2010-5161

CVE-2010-5161 describes a race condition in F-Secure Internet Security 2010 (build 246) for Windows XP that allows local users to bypass kernel-mode hook handlers and execute code that would be blocked by a handler but not by signature-based malware detection. The underlying issue is a KHOBE/argu...

CVE-2010-5153

CVE-2010-5153 details a race condition in Avira Premium Security Suite 10.0.0.536 on Windows XP that can bypass kernel‑mode hook handlers and allow local code execution during hook‑handler execution (KHOBE/argument‑switch attack). Documents confirm affected software and root cause (memory changes...

CVE-2010-5151

Race condition in avast! Internet Security 5.0.462 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...

CVE-2010-5184

CVE-2010-5184 describes a race condition in ZoneAlarm Extreme Security 9.1.507.000 on Windows XP that allows local users to bypass kernel-mode hook handlers and run code that could evade signature-based detection, via certain user-space memory changes during hook-handler execution (KHOBE/argument...

CVE-2010-5172

CVE-2010-5172 involves a race condition in Panda Internet Security 2010 (version 15.01.00) on Windows XP that lets local users bypass kernel-mode hook handlers by making certain user-space memory changes during hook-handler execution (KHOBE/argument-switch attack). This can allow execution of cod...

CVE-2010-5178

ThreatFire 4.7.0.17 on Windows XP is affected by a race-condition vulnerability that can bypass kernel-mode hook handlers via KHOBE/argument-switch memory changes during hook execution, allowing local code execution that could evade signature-based detection. Affected component: ThreatFire’s hook...

CVE-2010-5169

CVE-2010-5169 describes a race condition in Online Armor Premium 4.0.0.35 on Windows XP that lets local users bypass kernel-mode hook handlers and execute code blocked by the handler or by signature-based malware detection. The KHOBE/argument-switch attack relies on specific user-space memory cha...

CVE-2010-5180

CVE-2010-5180 concerns a race condition in VBA32 Personal 3.12.12.4 on Windows XP that allows a local user to bypass kernel-mode hook handlers by performing certain user-space memory changes during hook-handler execution (KHOBE/argument-switch attack). Affected component: VBA32 Personal 3.12.12.4...

CVE-2010-5159

Race condition in Dr.Web Security Space Pro 6.0.0.03100 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...

CVE-2010-5183

CVE-2010-5183 affects Webroot Internet Security Essentials 6.1.0.145 on Windows XP. The root cause is a race condition that lets local users bypass kernel-mode hook handlers and run code that could evade signature-based detection via certain user-space memory changes during hook-handler execution...

CVE-2010-5162

Race condition in G DATA TotalCare 2010 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler...

CVE-2010-5174

Prevx 3.0.5.143 on Windows XP is affected by a race condition that lets local users bypass kernel-mode hook handlers and execute code that might evade signature-based malware detection, via certain user-space memory changes during hook-handler execution (KHOBE/argument-switch attack). The issue i...

CVE-2010-5150

The vulnerability CVE-2010-5150 affects 3D EQSecure Professional Edition 4.2 on Windows XP. A race condition in the software allows local attackers to bypass kernel‑mode hook handlers and execute code that would ordinarily be blocked by a handler, via certain user‑space memory changes during hook...

CVE-2010-5152

CVE-2010-5152 concerns AVG Internet Security 9.0.791 on Windows XP. It describes a race condition enabling local users to bypass kernel‑mode hook handlers by making certain user‑space memory changes during hook‑handler execution, known as an argument‑switch or KHOBE attack. Some third parties dis...

CVE-2010-5162

CVE-2010-5162 describes a race condition in G DATA TotalCare 2010 for Windows XP that allows local users to bypass kernel-mode hook handlers via certain user-space memory changes during hook-handler execution (an argument-switch or KHOBE attack). Affected software is G DATA TotalCare 2010; the ro...

CVE-2010-5164

Race condition in KingSoft Personal Firewall 9 Plus 2009.05.07.70 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory chang...

CVE-2010-5156

CVE-2010-5156 concerns CA Internet Security Suite Plus 2010, version 6.0.0.272 on Windows XP. A race condition allows local attackers to bypass kernel‑mode hook handlers and run code that could evade signature‑based detection, via user‑space memory changes during hook‑handler execution (KHOBE/arg...

CVE-2010-5168

CVE-2010-5168 describes a race condition in Symantec Norton Internet Security 2010 (version 17.5.0.127) on Windows XP that allows local users to bypass kernel-mode hook handlers and run code that would normally be blocked by a hook, via certain user-space memory changes during hook-handler execut...

CVE-2010-5159

CVE-2010-5159 describes a race condition in Dr.Web Security Space Pro 6.0.0.03100 on Windows XP that allows local users to bypass kernel-mode hook handlers and run code that would otherwise be blocked by a handler, via certain user-space memory changes during hook-handler execution (KHOBE/argumen...

CVE-2010-5176

Security Shield 2010 (version 13.0.16.313) on Windows XP is affected by a race condition (KHOBE) that lets local users bypass kernel-mode hook handlers and run code that would otherwise be blocked by a handler or signature checks. The root cause involves certain user-space memory changes during h...