CVE-2010-5157
Last modified
CVE-2010-5157 is a vulnerability of currently unknown severity. Race condition in Comodo Internet Security before 4.1.149672.916 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler execution, aka an argument-switch attack or a KHOBE attack.. EPSS estimates a 0.39% chance of exploitation in the next 30 days.
Description
Race condition in Comodo Internet Security before 4.1.149672.916 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler execution, aka an argument-switch attack or a KHOBE attack.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Comodo | Comodo Internet Security | <= 4.0.141842.828 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2010-5157?
How severe is CVE-2010-5157?
How do I fix CVE-2010-5157?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2010
- CVE-2010-5151Race condition in avast! Internet Security 5.0.462 on Window…
- CVE-2010-5152Race condition in AVG Internet Security 9.0.791 on Windows X…
- CVE-2010-5153Race condition in Avira Premium Security Suite 10.0.0.536 on…5.3
- CVE-2010-5154Race condition in BitDefender Total Security 2010 13.0.20.34…
- CVE-2010-5155Race condition in Blink Professional 4.6.1 on Windows XP all…
- CVE-2010-5156Race condition in CA Internet Security Suite Plus 2010 6.0.0…
- CVE-2010-5158Race condition in DefenseWall Personal Firewall 3.00 on Wind…
- CVE-2010-5159Race condition in Dr.Web Security Space Pro 6.0.0.03100 on W…7
- CVE-2010-5160Race condition in ESET Smart Security 4.2.35.3 on Windows XP…4.5
- CVE-2010-5161Race condition in F-Secure Internet Security 2010 10.00 buil…
- CVE-2010-5162Race condition in G DATA TotalCare 2010 on Windows XP allows…
- CVE-2010-5163Race condition in Kaspersky Internet Security 2010 9.0.0.736…
Are you affected by CVE-2010-5157?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST