CVE-2010-5175

CVE-2010-5175 affects PrivateFirewall 7.0.20.37 on Windows XP. A race condition in the product allows local users to bypass kernel-mode hook handlers via certain user-space memory changes during hook-handler execution, an issue also described as an argument-switch or KHOBE attack. This bypass cou...

CVE-2010-5172

CVE-2010-5172 involves a race condition in Panda Internet Security 2010 (version 15.01.00) on Windows XP that lets local users bypass kernel-mode hook handlers by making certain user-space memory changes during hook-handler execution (KHOBE/argument-switch attack). This can allow execution of cod...

CVE-2010-5178

ThreatFire 4.7.0.17 on Windows XP is affected by a race-condition vulnerability that can bypass kernel-mode hook handlers via KHOBE/argument-switch memory changes during hook execution, allowing local code execution that could evade signature-based detection. Affected component: ThreatFire’s hook...

CVE-2010-5160

The CVE-2010-5160 entry concerns ESET Smart Security 4.2.35.3 on Windows XP . It describes a race condition that allows local users to bypass kernel-mode hook handlers and run code that would otherwise be blocked by a handler, via certain user-space memory changes during hook-handler execution, r...

CVE-2010-5155

Race condition in Blink Professional 4.6.1 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler...

CVE-2010-5154

Affected software: BitDefender Total Security 2010, version 13.0.20.347, on Windows XP. Vulnerability: a race condition during kernel-mode hook handling that lets local users bypass hook handlers and potentially run code that would otherwise be blocked by a handler, via certain user-space memory ...

CVE-2010-5153

CVE-2010-5153 details a race condition in Avira Premium Security Suite 10.0.0.536 on Windows XP that can bypass kernel‑mode hook handlers and allow local code execution during hook‑handler execution (KHOBE/argument‑switch attack). Documents confirm affected software and root cause (memory changes...

CVE-2010-5182

VirusBuster Internet Security Suite 3.2 on Windows XP is affected by CVE-2010-5182 due to a race condition in the kernel‑mode hook handling. The flaw allows local users to bypass kernel‑mode hook handlers and execute code that might evade signature-based malware detection, via certain user‑space ...

CVE-2010-5164

Race condition in KingSoft Personal Firewall 9 Plus 2009.05.07.70 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory chang...

CVE-2010-5177

CVE-2010-5177 involves Sophos Endpoint Security and Control on Windows XP (version 9.0.5). A race condition in kernel-mode hook handling permits local users to bypass hook handlers and run code that would be blocked by the handler but not by signature-based malware detection, via certain user-spa...

CVE-2010-5181

A race condition in VIPRE Antivirus Premium version 4.0.3272 on Windows XP allows local users to bypass kernel-mode hook handlers. By performing specific user-space memory changes during hook-handler execution—a technique known as an argument-switch attack or KHOBE attack —an attacker can execute...

CVE-2010-5176

Security Shield 2010 (version 13.0.16.313) on Windows XP is affected by a race condition (KHOBE) that lets local users bypass kernel-mode hook handlers and run code that would otherwise be blocked by a handler or signature checks. The root cause involves certain user-space memory changes during h...

CVE-2010-5183

Race condition in Webroot Internet Security Essentials 6.1.0.145 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory change...

CVE-2010-5169

A race condition exists in Online Armor Premium version 4.0.0.35 on Windows XP , enabling local users to perform an argument-switch attack (or KHOBE attack ). By making specific user-space memory changes during hook-handler execution, an attacker can bypass kernel-mode hook handlers to execute da...

CVE-2010-5151

Race condition in avast! Internet Security 5.0.462 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...

CVE-2010-5159

Race condition in Dr.Web Security Space Pro 6.0.0.03100 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...

CVE-2010-5170

CVE-2010-5170 affects Online Solutions Security Suite 1.5.14905.0 on Windows XP. A race condition during hook-handler execution allows local users to bypass kernel-mode hook handlers and run code that would otherwise be blocked by a handler but not by signature-based detection (KHOBE/argument-swi...

CVE-2010-5152

CVE-2010-5152 concerns AVG Internet Security 9.0.791 on Windows XP. It describes a race condition enabling local users to bypass kernel‑mode hook handlers by making certain user‑space memory changes during hook‑handler execution, known as an argument‑switch or KHOBE attack. Some third parties dis...

CVE-2010-5156

CVE-2010-5156 concerns CA Internet Security Suite Plus 2010, version 6.0.0.272 on Windows XP. A race condition allows local attackers to bypass kernel‑mode hook handlers and run code that could evade signature‑based detection, via user‑space memory changes during hook‑handler execution (KHOBE/arg...

CVE-2010-5180

CVE-2010-5180 concerns a race condition in VBA32 Personal 3.12.12.4 on Windows XP that allows a local user to bypass kernel-mode hook handlers by performing certain user-space memory changes during hook-handler execution (KHOBE/argument-switch attack). Affected component: VBA32 Personal 3.12.12.4...