CVE-2010-5153: Race Condition
DISPUTED Race condition in Avira Premium Security Suite 10.0.0.536 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler execution, aka an argument-switch attack or a KHOBE attack. NOTE: this issue is disputed by some third parties because it is a flaw in a protection mechanism for situations where a crafted program has already begun to execute.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-5153?
CVE-2010-5153 is considered to have a high severity level due to its potential to allow local users to bypass security measures.
How do I fix CVE-2010-5153?
To mitigate CVE-2010-5153, it is recommended to update Avira Premium Security Suite to a version that addresses this vulnerability.
Which software is affected by CVE-2010-5153?
CVE-2010-5153 specifically affects Avira Premium Security Suite version 10.0.0.536 running on Microsoft Windows XP.
Can CVE-2010-5153 be exploited by remote attackers?
No, CVE-2010-5153 requires local access to the affected system for exploitation.
What is the impact of CVE-2010-5153 on system security?
The impact of CVE-2010-5153 is significant as it enables local users to execute malicious code by bypassing kernel-mode hooks.