PT-2012-1388 · Unknown · Security Shield 2010
CVE-2010-5176
·
Publicado
2012-08-25
·
Atualizado
2024-08-07
CVSS v2.0
6.2
Média
| Vetor | AV:L/AC:H/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Security Shield 2010 version 13.0.16.313
Description
A race condition exists that allows local users to bypass kernel-mode hook handlers and execute dangerous code. This is achieved through certain user-space memory changes during hook-handler execution. The issue is related to a flaw in a protection mechanism for situations where a crafted program has already begun to execute.
Recommendations
For Security Shield 2010 version 13.0.16.313, consider disabling the kernel-mode hook handlers as a temporary workaround until a patch is available. Restrict access to user-space memory to minimize the risk of exploitation.
Correção
Race Condition
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Security Shield 2010