CVE-2010-5157

Comodo Internet Security <4.1.149672.916 - Privilege Escalation

Title source: llm
STIX 2.1

Description

Race condition in Comodo Internet Security before 4.1.149672.916 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler execution, aka an argument-switch attack or a KHOBE attack.

References (11)

Core 11
Core References
Third Party Advisory mailing-list x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2010-05/0026.html
Third Party Advisory mailing-list x_refsource_fulldisc
http://archives.neohapsis.com/archives/fulldisclosure/2010-05/0066.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/39924
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/67660
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/65254

Scores

EPSS 0.0039
EPSS Percentile 30.6%

Details

CWE
CWE-362
Status published
Products (1)
comodo/comodo_internet_security < 4.0.141842.828
Published Aug 25, 2012
Tracked Since Feb 18, 2026