Race Condition Vulnerability in Comodo Internet Security on Windows XP

CVE-2010-5157

What is CVE-2010-5157?

A race condition exists in Comodo Internet Security prior to version 4.1.149672.916, which affects Windows XP. This flaw allows local users to bypass kernel-mode hook handlers, enabling them to execute potentially malicious code that would typically be mitigated by the security mechanisms in place. This occurs during the execution of hook handlers, leveraging specific user-space memory alterations—an attack method often referred to as an argument-switch or KHOBE attack.

References