PT-2012-1382 · Online Solutions · Online Solutions Security Suite
CVE-2010-5170
·
Publicado
2012-08-25
·
Atualizado
2024-08-07
CVSS v2.0
6.2
Média
| Vetor | AV:L/AC:H/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Online Solutions Security Suite version 1.5.14905.0
Description
A race condition exists in the software, allowing local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked. This is achieved through certain user-space memory changes during hook-handler execution. The issue is related to a flaw in a protection mechanism for situations where a crafted program has already begun to execute.
Recommendations
For Online Solutions Security Suite version 1.5.14905.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Race Condition
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Online Solutions Security Suite