Race Condition Vulnerability in Norton Internet Security by Symantec

CVE-2010-5168

Summary

A race condition in Symantec Norton Internet Security 2010 on Windows XP permits local users to manipulate memory changes during hook-handler execution, potentially enabling the execution of harmful code that is typically obstructed by the security handlers. This vulnerability arises from a flaw in the system's protection mechanism, which fails to adequately prevent exploitation by already executing crafted programs.

References