Executive Summary

Informations
Name CVE-2010-5174 First vendor Publication 2012-08-25
Vendor Cve Last vendor Modification 2024-03-21

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:H/Au:N/C:C/I:C/A:C)
Cvss Base Score 6.2 Attack Range Local
Cvss Impact Score 10 Attack Complexity High
Cvss Expoit Score 1.9 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Race condition in Prevx 3.0.5.143 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler execution, aka an argument-switch attack or a KHOBE attack. NOTE: this issue is disputed by some third parties because it is a flaw in a protection mechanism for situations where a crafted program has already begun to execute

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-5174

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-362 Race Condition

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 1

Sources (Detail)

Source Url
BID http://www.securityfocus.com/bid/39924
BUGTRAQ http://archives.neohapsis.com/archives/bugtraq/2010-05/0026.html
FULLDISC http://archives.neohapsis.com/archives/fulldisclosure/2010-05/0066.html
MISC http://countermeasures.trendmicro.eu/you-just-cant-trust-a-drunk/
http://matousec.com/info/advisories/khobe-8.0-earthquake-for-windows-desktop-...
http://matousec.com/info/articles/khobe-8.0-earthquake-for-windows-desktop-se...
http://www.f-secure.com/weblog/archives/00001949.html
http://www.theregister.co.uk/2010/05/07/argument_switch_av_bypass/
OSVDB http://www.osvdb.org/67660

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
Date Informations
2024-03-21 09:28:45
  • Multiple Updates
2023-11-07 21:46:49
  • Multiple Updates
2020-05-23 00:27:24
  • Multiple Updates
2016-06-28 18:27:54
  • Multiple Updates
2013-05-10 23:41:00
  • Multiple Updates