Race Condition Vulnerability in Avast Internet Security for Windows XP

CVE-2010-5151

What is CVE-2010-5151?

A race condition in avast! Internet Security 5.0.462 for Windows XP allows local users to exploit a flaw in the kernel-mode hook mechanism. During an 'argument-switch attack', attackers can manipulate user-space memory while hook-handlers are executed, potentially allowing the execution of malicious code that would normally be intercepted by the security measures in place. This vulnerability raises significant concerns about the reliability of installed security software when faced with pre-executed malicious programs.

References