CVE Feed

    Dashboard / CVE / CVE-2010-5174

    CVE-2010-5174

    Race condition in Prevx 3.0.5.143 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler execution, aka an argument-switch attack or a KHOBE attack. NOTE: this issue is disputed by some third parties because it is a flaw in a protection mechanism for situations where a crafted program has already begun to execute

    Published:Aug 25, 2012
    Last Modified:Apr 11, 2025
    EPS:Aug 25, 2012
    EPSS Score:0.00046
    CVSS Score:6.2

    Affected Products

    Vendor
    Microsoft
    Product
    Windows Xp
    Vendor
    Prevx
    Product
    Prevx

    Exploits

    No exploit reference

    Related CVEs

    References

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High