CVE-2010-5158

CVE-2010-5158 (DefenseWall Personal Firewall 3.00 on Windows XP) is a race condition that can bypass kernel-mode hook handlers by manipulating user-space memory during hook-handler execution, enabling code execution that may evade signature-based detection. The Red Hat and NVD entries confirm the...

CVE-2010-5153

CVE-2010-5153 details a race condition in Avira Premium Security Suite 10.0.0.536 on Windows XP that can bypass kernel‑mode hook handlers and allow local code execution during hook‑handler execution (KHOBE/argument‑switch attack). Documents confirm affected software and root cause (memory changes...

CVE-2010-5150

The vulnerability CVE-2010-5150 affects 3D EQSecure Professional Edition 4.2 on Windows XP. A race condition in the software allows local attackers to bypass kernel‑mode hook handlers and execute code that would ordinarily be blocked by a handler, via certain user‑space memory changes during hook...

CVE-2010-5172

Race condition in Panda Internet Security 2010 15.01.00 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...

CVE-2010-5175

Race condition in PrivateFirewall 7.0.20.37 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler...

CVE-2010-5164

The connected PT-2012-1376 entry confirms a concrete vulnerability in Kingsoft Personal Firewall 9 Plus, version 2009.05.07.70 on Windows XP: a race condition that enables local users to bypass kernel-mode hook handlers and execute code that would otherwise be blocked by handlers, via user-space ...

CVE-2010-5171

Outpost Security Suite Pro versions 6.7.3.3063.452.0726 and 7.0.3330.505.1221 BETA on Windows XP are affected by a race condition (KHOBE) that lets local users bypass kernel-mode hook handlers and run code that signature-based malware detection might not block. Root cause: a race condition during...

CVE-2010-5163

Kaspersky Internet Security 2010 (9.0.0.736) on Windows XP is affected by a race condition that can bypass kernel-mode hook handlers and allow local code execution that evades signature-based detection (KHOBE/argument-switch attack). Root cause: exploiting certain user-space memory changes during...

CVE-2010-5176

Security Shield 2010 (version 13.0.16.313) on Windows XP is affected by a race condition (KHOBE) that lets local users bypass kernel-mode hook handlers and run code that would otherwise be blocked by a handler or signature checks. The root cause involves certain user-space memory changes during h...

CVE-2010-5154

Affected software: BitDefender Total Security 2010, version 13.0.20.347, on Windows XP. Vulnerability: a race condition during kernel-mode hook handling that lets local users bypass hook handlers and potentially run code that would otherwise be blocked by a handler, via certain user-space memory ...

CVE-2010-5166

CVE-2010-5166 describes a race condition in McAfee Total Protection 2010 10.0.580 on Windows XP that allows local users to bypass kernel-mode hook handlers by making specific user-space memory changes during hook-handler execution (KHOBE/argument-switch attack). Affected component appears to be k...

CVE-2010-5162

Race condition in G DATA TotalCare 2010 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler...

CVE-2010-5178

Race condition in ThreatFire 4.7.0.17 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler...

CVE-2010-5175

Race condition in PrivateFirewall 7.0.20.37 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler...

CVE-2010-5169

Race condition in Online Armor Premium 4.0.0.35 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...

CVE-2010-5150

Race condition in 3D EQSecure Professional Edition 4.2 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...

CVE-2010-5174

Race condition in Prevx 3.0.5.143 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler execution...

CVE-2010-5153

Race condition in Avira Premium Security Suite 10.0.0.536 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes durin...

CVE-2010-5173

CVE-2010-5173 concerns a race condition in PC Tools Firewall Plus 6.0.0.88 on Windows XP that could allow local users to bypass kernel-mode hook handlers by manipulating user-space memory during hook-handler execution (KHOBE/argument-switch attack). Red Hat and other sources corroborate a local-a...

CVE-2010-5163

Race condition in Kaspersky Internet Security 2010 9.0.0.736 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes...