Every CVESearch/Get API key

CVE-2010-5174

** DISPUTED ** Race condition in Prevx 3.0.5.143 on Windows XP allows local users to bypass...

6.2 MediumDisputed

CVE-2010-5174 is a medium vulnerability (CVSS 6.2) in Prevx, published August 25, 2012. Its validity is disputed. EPSS puts the chance of exploitation in the next 30 days at 0.29%, the 21st percentile.

What does this mean?
Severity
6.2 MediumCVSS 2.0, NVD
Exploit chance
0.29%EPSS, 21st percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

Race condition in Prevx 3.0.5.143 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler execution, aka an argument-switch attack or a KHOBE attack. NOTE: this issue is disputed by some third parties because it is a flaw in a protection mechanism for situations where a crafted program has already begun to execute

Exploit likelihood

0.29%Down 1.9 points since Feb 4, 2022
90%50%10%1%

Affected products

What each source reports

NVD Score used6.2

Race condition in Prevx 3.0.5.143 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler execution, aka an argument-switch attack or a KHOBE attack. NOTE: this issue is disputed by some third parties because it is a flaw in a protection mechanism for situations where a crafted program has already begun to execute

Record
CVE-2010-5174
CVSS 2.0
6.2 MediumAV:L/AC:H/Au:N/C:C/I:C/A:C
Weakness
CWE-362
Updated
2026-11-02
CVE ListNo score

Race condition in Prevx 3.0.5.143 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler execution, aka an argument-switch attack or a KHOBE attack. NOTE: this issue is disputed by some third parties because it is a flaw in a protection mechanism for situations where a crafted program has already begun to execute

Record
CVE-2010-5174
Updated
2026-11-02
EUVDEUVD-2010-5133No score

Race condition in Prevx 3.0.5.143 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler execution, aka an argument-switch attack or a KHOBE attack. NOTE: this issue is disputed by some third parties because it is a flaw in a protection mechanism for situations where a crafted program has already begun to execute

Record
EUVD-2010-5133
Updated
2026-11-03
GitHub AdvisoriesGHSA-mxqh-xqpx-hxg6No score

** DISPUTED ** Race condition in Prevx 3.0.5.143 on Windows XP allows local users to bypass...

** DISPUTED ** Race condition in Prevx 3.0.5.143 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler execution, aka an argument-switch attack or a KHOBE attack. NOTE: this issue is disputed by some third parties because it is a flaw in a protection mechanism for situations where a crafted program has already begun to execute.

Record
GHSA-mxqh-xqpx-hxg6
Weakness
CWE-362
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 5 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open