CVE-2010-5157
Race condition in Comodo Internet Security before 4.1.149672.916 on Windows XP allows local users...
Race condition in Comodo Internet Security before 4.1.149672.916 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler execution, aka an argument-switch attack or a KHOBE attack.
Exploit likelihood
What each source reports
NVD Score used
6.2
Race condition in Comodo Internet Security before 4.1.149672.916 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler execution, aka an argument-switch attack or a KHOBE attack.
- Record
CVE-2010-5157- CVSS 2.0
- 6.2 Medium
AV:L/AC:H/Au:N/C:C/I:C/A:C - Weakness
- CWE-362
- Updated
- 2026-11-02
CVE List No score
Race condition in Comodo Internet Security before 4.1.149672.916 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler execution, aka an argument-switch attack or a KHOBE attack.
- Record
CVE-2010-5157- Updated
- 2026-11-02
EUVDEUVD-2010-5116 No score
Race condition in Comodo Internet Security before 4.1.149672.916 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler execution, aka an argument-switch attack or a KHOBE attack.
- Record
EUVD-2010-5116- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7xrv-rhf6-8wp9 No score
Race condition in Comodo Internet Security before 4.1.149672.916 on Windows XP allows local users...
Race condition in Comodo Internet Security before 4.1.149672.916 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler execution, aka an argument-switch attack or a KHOBE attack.
- Record
GHSA-7xrv-rhf6-8wp9- Weakness
- CWE-362
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-5157 is a medium vulnerability (CVSS 6.2) in Comodo Internet Security, published August 25, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 33rd percentile. No source names a fixed version.
References
archives.neohapsis.com/archives/bugtraq/2010-05/0026.html
countermeasures.trendmicro.eu/you-just-cant-trust-a-drunk
securityfocus.com/bid/39924
matousec.com/info/articles/khobe-8.0-earthquake-for-windows-desktop-security-software.php
archives.neohapsis.com/archives/fulldisclosure/2010-05/0066.html
osvdb.org/67660
Show 7 moreShow less
osvdb.org/65254
theregister.co.uk/2010/05/07/argument_switch_av_bypass
forums.comodo.com/news-announcements-feedback-cis/comodo-internet-security-41149672916-released-t57051.0.html
f-secure.com/weblog/archives/00001949.html
matousec.com/info/advisories/khobe-8.0-earthquake-for-windows-desktop-security-software.php
nvd.nist.gov/vuln/detail/CVE-2010-5157
github.com/advisories/GHSA-7xrv-rhf6-8wp9