Race Condition Vulnerability in Norton Internet Security by Symantec
CVE-2010-5168

Currently unrated

Key Information:

Vendor

Symantec
Status
Norton Internet Security 2010
Vendor
CVE Published:
25 August 2012

What is CVE-2010-5168?

A race condition in Symantec Norton Internet Security 2010 on Windows XP permits local users to manipulate memory changes during hook-handler execution, potentially enabling the execution of harmful code that is typically obstructed by the security handlers. This vulnerability arises from a flaw in the system's protection mechanism, which fails to adequately prevent exploitation by already executing crafted programs.

References

http://archives.neohapsis.com/archives/bugtraq/2010-05/00...
mailing-listx_refsource_BUGTRAQ
http://countermeasures.trendmicro.eu/you-just-cant-trust-...
x_refsource_MISC
http://www.securityfocus.com/bid/39924
vdb-entryx_refsource_BID

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.