Every CVESearch/Get API key

CVE-2010-5155

** DISPUTED ** Race condition in Blink Professional 4.6.1 on Windows XP allows local users to...

6.2 MediumDisputed

CVE-2010-5155 is a medium vulnerability (CVSS 6.2) in Eeye Blink, published August 25, 2012. Its validity is disputed. EPSS puts the chance of exploitation in the next 30 days at 0.30%, the 23rd percentile.

What does this mean?
Severity
6.2 MediumCVSS 2.0, NVD
Exploit chance
0.30%EPSS, 23rd percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

Race condition in Blink Professional 4.6.1 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler execution, aka an argument-switch attack or a KHOBE attack. NOTE: this issue is disputed by some third parties because it is a flaw in a protection mechanism for situations where a crafted program has already begun to execute

Exploit likelihood

0.30%Down 1.9 points since Feb 4, 2022
90%50%10%1%

Affected products

What each source reports

NVD Score used6.2

Race condition in Blink Professional 4.6.1 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler execution, aka an argument-switch attack or a KHOBE attack. NOTE: this issue is disputed by some third parties because it is a flaw in a protection mechanism for situations where a crafted program has already begun to execute

Record
CVE-2010-5155
CVSS 2.0
6.2 MediumAV:L/AC:H/Au:N/C:C/I:C/A:C
Weakness
CWE-362
Updated
2026-11-02
CVE ListNo score

Race condition in Blink Professional 4.6.1 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler execution, aka an argument-switch attack or a KHOBE attack. NOTE: this issue is disputed by some third parties because it is a flaw in a protection mechanism for situations where a crafted program has already begun to execute

Record
CVE-2010-5155
Updated
2026-11-02
EUVDEUVD-2010-5114No score

Race condition in Blink Professional 4.6.1 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler execution, aka an argument-switch attack or a KHOBE attack. NOTE: this issue is disputed by some third parties because it is a flaw in a protection mechanism for situations where a crafted program has already begun to execute

Record
EUVD-2010-5114
Updated
2026-11-03
GitHub AdvisoriesGHSA-wmwq-vq22-mv7hNo score

** DISPUTED ** Race condition in Blink Professional 4.6.1 on Windows XP allows local users to...

** DISPUTED ** Race condition in Blink Professional 4.6.1 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler execution, aka an argument-switch attack or a KHOBE attack. NOTE: this issue is disputed by some third parties because it is a flaw in a protection mechanism for situations where a crafted program has already begun to execute.

Record
GHSA-wmwq-vq22-mv7h
Weakness
CWE-362
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 5 moreShow less
MoveEnter Open