CVE-2010-5160

🗓️ 25 Aug 2012 21:00:00Reported by mitreType

Race condition in ESET Smart Security 4.2.35.3 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler execution, aka an argument-switch attack or a KHOBE attack.

Reporter	Title	Published	Views	Family All 6
CVE	CVE-2010-5160	25 Aug 201221:00	–	cve
Cvelist	CVE-2010-5160	25 Aug 201221:00	–	cvelist
NVD	CVE-2010-5160	25 Aug 201221:55	–	nvd
Prion	Race condition	25 Aug 201221:55	–	prion
Positive Technologies	PT-2012-1372 · Eset · Eset Smart Security	25 Aug 201200:00	–	ptsecurity
RedhatCVE	CVE-2010-5160	22 May 202512:39	–	redhatcve

[
  {
    "cpes": [
      "cpe:2.3:a:eset:smart_security:4.2.35.3:*:*:*:*:*:*:*"
    ],
    "vendor": "eset",
    "product": "smart_security",
    "versions": [
      {
        "status": "affected",
        "version": "4.2.35.3"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
f-secure	www.f-secure.com/weblog/archives/00001949.html
osvdb	www.osvdb.org/67660
matousec	www.matousec.com/info/articles/khobe-8.0-earthquake-for-windows-desktop-security-software.php
archives	www.archives.neohapsis.com/archives/fulldisclosure/2010-05/0066.html
securityfocus	www.securityfocus.com/bid/39924
matousec	www.matousec.com/info/advisories/khobe-8.0-earthquake-for-windows-desktop-security-software.php
countermeasures	www.countermeasures.trendmicro.eu/you-just-cant-trust-a-drunk/
archives	www.archives.neohapsis.com/archives/bugtraq/2010-05/0026.html
theregister	www.theregister.co.uk/2010/05/07/argument_switch_av_bypass/

25 Aug 2012 21:00Current

7High risk

Vulners AI Score7

EPSS0.00366

SSVC