CVE-2010-5172

Race condition in Panda Internet Security 2010 15.01.00 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...

CVE-2010-5163

Kaspersky Internet Security 2010 (9.0.0.736) on Windows XP is affected by a race condition that can bypass kernel-mode hook handlers and allow local code execution that evades signature-based detection (KHOBE/argument-switch attack). Root cause: exploiting certain user-space memory changes during...

CVE-2010-5176

Security Shield 2010 (version 13.0.16.313) on Windows XP is affected by a race condition (KHOBE) that lets local users bypass kernel-mode hook handlers and run code that would otherwise be blocked by a handler or signature checks. The root cause involves certain user-space memory changes during h...

CVE-2010-5155

Race condition in Blink Professional 4.6.1 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler...

CVE-2010-5154

Affected software: BitDefender Total Security 2010, version 13.0.20.347, on Windows XP. Vulnerability: a race condition during kernel-mode hook handling that lets local users bypass hook handlers and potentially run code that would otherwise be blocked by a handler, via certain user-space memory ...

CVE-2010-5172

CVE-2010-5172 involves a race condition in Panda Internet Security 2010 (version 15.01.00) on Windows XP that lets local users bypass kernel-mode hook handlers by making certain user-space memory changes during hook-handler execution (KHOBE/argument-switch attack). This can allow execution of cod...

CVE-2010-5164

The connected PT-2012-1376 entry confirms a concrete vulnerability in Kingsoft Personal Firewall 9 Plus, version 2009.05.07.70 on Windows XP: a race condition that enables local users to bypass kernel-mode hook handlers and execute code that would otherwise be blocked by handlers, via user-space ...

CVE-2010-5171

Race condition in Outpost Security Suite Pro 6.7.3.3063.452.0726 and 7.0.3330.505.1221 BETA on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certa...

CVE-2010-5175

Race condition in PrivateFirewall 7.0.20.37 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler...

CVE-2010-5162

CVE-2010-5162 describes a race condition in G DATA TotalCare 2010 for Windows XP that allows local users to bypass kernel-mode hook handlers via certain user-space memory changes during hook-handler execution (an argument-switch or KHOBE attack). Affected software is G DATA TotalCare 2010; the ro...

CVE-2010-5172

Race condition in Panda Internet Security 2010 15.01.00 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...

CVE-2010-5155

CVE-2010-5155 concerns a race condition in Blink Professional 4.6.1 on Windows XP that allows local users to bypass kernel‑mode hook handlers by making certain user‑space memory changes during hook‑handler execution (an argument-switch or KHOBE attack). The vulnerability can enable execution of c...

CVE-2010-5178

Race condition in ThreatFire 4.7.0.17 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler...

CVE-2010-5169

Race condition in Online Armor Premium 4.0.0.35 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...

CVE-2010-5150

Race condition in 3D EQSecure Professional Edition 4.2 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...

CVE-2010-5153

Race condition in Avira Premium Security Suite 10.0.0.536 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes durin...

CVE-2010-5173

CVE-2010-5173 concerns a race condition in PC Tools Firewall Plus 6.0.0.88 on Windows XP that could allow local users to bypass kernel-mode hook handlers by manipulating user-space memory during hook-handler execution (KHOBE/argument-switch attack). Red Hat and other sources corroborate a local-a...

CVE-2010-5163

Race condition in Kaspersky Internet Security 2010 9.0.0.736 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes...

CVE-2010-5178

ThreatFire 4.7.0.17 on Windows XP is affected by a race-condition vulnerability that can bypass kernel-mode hook handlers via KHOBE/argument-switch memory changes during hook execution, allowing local code execution that could evade signature-based detection. Affected component: ThreatFire’s hook...

CVE-2010-5177

CVE-2010-5177 involves Sophos Endpoint Security and Control on Windows XP (version 9.0.5). A race condition in kernel-mode hook handling permits local users to bypass hook handlers and run code that would be blocked by the handler but not by signature-based malware detection, via certain user-spa...