deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2012-4605
Published: 2012-08-23
Description: The default configuration of the SMTP component in Websense Email Security 6.1 through 7.3 enables weak SSL ciphers in the "SurfControl plc\SuperScout Email Filter\SMTP" registry key, which makes it easier for remote attackers to obtain sensitive information by sniffing the network and then conducting a brute-force attack against encrypted session data.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/64758; http://www.websense.com/support/article/kbarticle/SSL-TLS-weak-and-export-ciphers-detected-in-Websense-Email-Security-deployments; https://exchange.xforce.ibmcloud.com/vulnerabilities/78131
CVE: CVE-2012-4337
Published: 2012-08-23
Description: Foxit Reader before 5.3 on Windows XP and Windows 7 allows remote attackers to execute arbitrary code via a PDF document with a crafted attachment that triggers calculation of a negative number during processing of cross references.
CVSS Score: 9.3 (HIGH)
References: http://secunia.com/advisories/50359; http://securitytracker.com/id?1027424; http://technet.microsoft.com/security/msvr/msvr12-013
CVE: CVE-2011-5103
Published: 2012-08-23
Description: SQL injection vulnerability in Alurian Prismotube PHP Video Script allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/18156; http://www.securityfocus.com/bid/50815; https://exchange.xforce.ibmcloud.com/vulnerabilities/71481
CVE: CVE-2011-5104
Published: 2012-08-23
Description: Cross-site scripting (XSS) vulnerability in wpsc-admin/display-sales-logs.php in WP e-Commerce plugin 3.8.7.1 and possibly earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the custom_text parameter.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/77249; http://plugins.trac.wordpress.org/changeset?reponame=&new=463447%40wp-e-commerce&old=463446%40wp-e-commerce; http://secunia.com/advisories/46957
CVE: CVE-2011-5105
Published: 2012-08-23
Description: Multiple cross-site scripting (XSS) vulnerabilities in EmployeeSearch.cc in ZOHO ManageEngine ADSelfService Plus 4.5 Build 4521 allow remote attackers to inject arbitrary web script or HTML via the (1) searchType and (2) searchString parameters, a different vulnerability than CVE-2010-3274.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jameswebb.me/vulns/vrpth-2011-001.txt; http://www.securityfocus.com/archive/1/520562/100/0/threaded; http://www.securityfocus.com/bid/50717
CVE: CVE-2011-5106
Published: 2012-08-23
Description: Cross-site scripting (XSS) vulnerability in edit-post.php in the Flexible Custom Post Type plugin before 0.1.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://plugins.trac.wordpress.org/changeset?reponame=&new=466252%40flexible-custom-post-type&old=465583%40flexible-custom-post-type; http://wordpress.org/extend/plugins/flexible-custom-post-type/changelog/; http://www.securityfocus.com/archive/1/520542/100/0/threaded
CVE: CVE-2011-5107
Published: 2012-08-23
Description: Cross-site scripting (XSS) vulnerability in post_alert.php in Alert Before Your Post plugin, possibly 0.1.1 and earlier, for WordPress allows remote attackers to inject arbitrary web script or HTML via the name parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/archive/1/520590/100/0/threaded; http://www.securityfocus.com/bid/50743; https://exchange.xforce.ibmcloud.com/vulnerabilities/71413
CVE: CVE-2011-5108
Published: 2012-08-23
Description: Cross-site scripting (XSS) vulnerability in config.php in AdaptCMS 2.0.0 and 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/files/view/107253/adaptcms-sql.txt; http://www.securityfocus.com/bid/50795; https://exchange.xforce.ibmcloud.com/vulnerabilities/71483
CVE: CVE-2011-5109
Published: 2012-08-23
Description: Multiple SQL injection vulnerabilities in Freelancer calendar 1.01 and earlier allow remote attackers to inject arbitrary web script or HTML via the SearchField parameter in a search action to (1) category_list.php, (2) Copy_of_calendar_list.php, (3) customer_statistics_list.php, (4) customer_list.php, and (5) task_statistics_list.php in the worldcalendar directory.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://archives.neohapsis.com/archives/fulldisclosure/2011-11/0305.html; http://osvdb.org/77244; http://osvdb.org/77245
CVE: CVE-2011-5110
Published: 2012-08-23
Description: Multiple SQL injection vulnerabilities in Blogs Manager 1.101 and earlier allow remote attackers to execute arbitrary SQL commands via the SearchField parameter in a search action to (1) _authors_list.php, (2) _blogs_list.php, (3) _category_list.php, (4) _comments_list.php, (5) _policy_list.php, (6) _rate_list.php, (7) categoriesblogs_list.php, (8) chosen_authors_list.php, (9) chosen_blogs_list.php, (10) chosen_comments_list.php, and (11) help_list.php in blogs/.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://archives.neohapsis.com/archives/fulldisclosure/2011-11/0303.html; http://osvdb.org/77250; http://osvdb.org/77251
CVE: CVE-2011-5111
Published: 2012-08-23
Description: Multiple SQL injection vulnerabilities in Kajian Website CMS Balitbang 3.x allow remote attackers to execute arbitrary SQL commands via the hal parameter to (1) the data module in alumni.php; or the (2) lih_buku, (3) artikel, (4) album, or (5) berita module in index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/files/view/107254/cmsbalitbang-sql.txt; http://www.securityfocus.com/bid/50797; https://exchange.xforce.ibmcloud.com/vulnerabilities/71466
CVE: CVE-2011-5112
Published: 2012-08-23
Description: SQL injection vulnerability in Alameda (com_alameda) component before 1.0.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the storeid parameter to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.blueflyingfish.com/alameda/index.php?option=com_content&view=article&id=7:security-releases&catid=5:security-releases&Itemid=28; http://www.exploit-db.com/exploits/18058; http://www.blueflyingfish.com/alameda/index.php?option=com_content&view=article&id=7:security-releases&catid=5:security-releases&Itemid=28
CVE: CVE-2011-5113
Published: 2012-08-23
Description: SQL injection vulnerability in frontend/models/techfoliodetail.php in Techfolio (com_techfolio) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://docs.joomla.org/Vulnerable_Extensions_List#Techfolio_1.0; http://www.exploit-db.com/exploits/18042; http://docs.joomla.org/Vulnerable_Extensions_List#Techfolio_1.0
CVE: CVE-2011-5114
Published: 2012-08-23
Description: Multiple cross-site scripting (XSS) vulnerabilities in the Authoritative DNS - DNS Zones page in Barracuda Link Balancer 330 Firmware 1.3.2.005 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) zoneid or (2) scope parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securitytracker.com/id?1026283; http://www.vulnerability-lab.com/get_content.php?id=33; http://www.securitytracker.com/id?1026283
CVE: CVE-2011-5115
Published: 2012-08-23
Description: Cross-site scripting (XSS) vulnerability in DLGuard, possibly 4.6 and earlier, allows remote attackers to inject arbitrary web script or HTML via the searchCart parameter to index.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/files/106859/dlguardshoppingcart-xss.txt; http://secunia.com/advisories/46855; http://packetstormsecurity.org/files/106859/dlguardshoppingcart-xss.txt
CVE: CVE-2011-5116
Published: 2012-08-23
Description: SQL injection vulnerability in setseed-hub in SetSeed CMS 5.8.20, 5.11.2, and earlier allows remote attackers to execute arbitrary SQL commands via the loggedInUser cookie.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/18065; http://www.zeroscience.mk/en/vulnerabilities/ZSL-2011-5053.php; http://www.exploit-db.com/exploits/18065
CVE: CVE-2011-5117
Published: 2012-08-24
Description: Sophos SafeGuard Enterprise Device Encryption 5.x through 5.50.8.13, Sophos SafeGuard Easy Device Encryption Client 5.50.x, and Sophos Disk Encryption 5.50.x have a delay before removal of (1) out-of-date credentials and (2) invalid credentials, which allows physically proximate attackers to defeat the full-disk encryption feature by leveraging knowledge of these credentials.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-362
References: http://www.sophos.com/en-us/support/knowledgebase/112655.aspx; http://www.sophos.com/en-us/support/knowledgebase/112655.aspx
CVE: CVE-2012-0713
Published: 2012-08-24
Description: Unspecified vulnerability in the XML feature in IBM DB2 9.7 before FP6 on Linux, UNIX, and Windows allows remote authenticated users to read arbitrary XML files via unknown vectors.
CVSS Score: 3.5 (LOW)
References: http://www-01.ibm.com/support/docview.wss?uid=swg1IC81462; http://www.securityfocus.com/bid/53873; http://www-01.ibm.com/support/docview.wss?uid=swg1IC81462
CVE: CVE-2012-2984
Published: 2012-08-24
Description: Multiple cross-site scripting (XSS) vulnerabilities in monitor/m_overview.ink in Websense Content Gateway before 7.7.3 allow remote attackers to inject arbitrary web script or HTML via the (1) menu or (2) item parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/50368; http://www.kb.cert.org/vuls/id/318779; http://secunia.com/advisories/50368
CVE: CVE-2012-2990
Published: 2012-08-24
Description: The MASetupCaller ActiveX control before 1.4.2012.508 in MASetupCaller.dll in MarkAny ContentSAFER, as distributed in Samsung KIES before 2.3.2.12074_13_13, does not properly implement unspecified methods, which allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via a crafted HTML document.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.kb.cert.org/vuls/id/663809; http://www.krcert.or.kr/kor/data/secNoticeView.jsp?p_bulletin_writing_sequence=931; http://www.kb.cert.org/vuls/id/663809
CVE: CVE-2012-0048
Published: 2012-08-25
Description: OpenTTD 0.3.5 through 1.1.4 allows remote attackers to cause a denial of service (game pause) by connecting to the server and not finishing the (1) authorization phase or (2) map download, aka a "slow read" attack.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://bugs.openttd.org/task/4955; http://secunia.com/advisories/50137; http://security.openttd.org/en/CVE-2012-0049
CVE: CVE-2012-3402
Published: 2012-08-25
Description: Integer overflow in plug-ins/common/psd.c in the Adobe Photoshop PSD plugin in GIMP 2.2.13 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted channels header value in a PSD image file, which triggers a heap-based buffer overflow, a different vulnerability than CVE-2009-3909.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-190
References: http://rhn.redhat.com/errata/RHSA-2012-1181.html; http://secunia.com/advisories/50737; http://security.gentoo.org/glsa/glsa-201209-23.xml
CVE: CVE-2012-3403
Published: 2012-08-25
Description: Heap-based buffer overflow in the KiSS CEL file format plug-in in GIMP 2.8.x and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted KiSS palette file, which triggers an "invalid free."
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00020.html; http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00000.html; http://rhn.redhat.com/errata/RHSA-2012-1180.html
CVE: CVE-2012-3416
Published: 2012-08-25
Description: Condor before 7.8.2 allows remote attackers to bypass host-based authentication and execute actions such as ALLOW_ADMINISTRATOR or ALLOW_WRITE by connecting from a system with a spoofed reverse DNS hostname.
CVSS Score: 10.0 (HIGH)
CWE: CWE-287
References: http://osvdb.org/84766; http://research.cs.wisc.edu/condor/security/vulnerabilities/CONDOR-2012-0002.html; http://rhn.redhat.com/errata/RHSA-2012-1168.html
CVE: CVE-2012-3441
Published: 2012-08-25
Description: The database creation script (module/idoutils/db/scripts/create_mysqldb.sh) in Icinga 1.7.1 grants access to all databases to the icinga user, which allows icinga users to access other databases via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-updates/2012-08/msg00012.html; http://www.openwall.com/lists/oss-security/2012/07/30/6; http://www.openwall.com/lists/oss-security/2012/07/30/7
CVE: CVE-2012-3479
Published: 2012-08-25
Description: lisp/files.el in Emacs 23.2, 23.3, 23.4, and 24.1 automatically executes eval forms in local-variable sections when the enable-local-variables option is set to :safe, which allows user-assisted remote attackers to execute arbitrary Emacs Lisp code via a crafted file.
CVSS Score: 6.8 (MEDIUM)
References: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=12155; http://lists.opensuse.org/opensuse-updates/2012-10/msg00057.html; http://secunia.com/advisories/50157
CVE: CVE-2012-3480
Published: 2012-08-25
Description: Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other unspecified "related functions" in stdlib in GNU C Library (aka glibc or libc6) 2.16 allow local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long string, which triggers a stack-based buffer overflow.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-189
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085190.html; http://osvdb.org/84710; http://rhn.redhat.com/errata/RHSA-2012-1207.html
CVE: CVE-2012-3481
Published: 2012-08-25
Description: Integer overflow in the ReadImage function in plug-ins/common/file-gif-load.c in the GIF image format plug-in in GIMP 2.8.x and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted height and len properties in a GIF image file, which triggers a heap-based buffer overflow.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-190
References: http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00023.html; http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00000.html; http://lists.opensuse.org/opensuse-updates/2012-09/msg00043.html
CVE: CVE-2012-3501
Published: 2012-08-25
Description: The squidclamav_check_preview_handler function in squidclamav.c in SquidClamav 5.x before 5.8 and 6.x before 6.7 passes an unescaped URL to a system command call, which allows remote attackers to cause a denial of service (daemon crash) via a URL with certain characters, as demonstrated using %0D or %0A.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://freecode.com/projects/squidclamav/releases/346722; http://secunia.com/advisories/49057; http://squidclamav.darold.net/news.html
CVE: CVE-2012-3503
Published: 2012-08-25
Description: The installation script in Katello 1.0 and earlier does not properly generate the Application.config.secret_token value, which causes each default installation to have the same secret token, and allows remote attackers to authenticate to the CloudForms System Engine web interface as an arbitrary user by creating a cookie using the default secret_token.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://rhn.redhat.com/errata/RHSA-2012-1186.html; http://rhn.redhat.com/errata/RHSA-2012-1187.html; http://secunia.com/advisories/50344
CVE: CVE-2012-3507
Published: 2012-08-25
Description: Cross-site scripting (XSS) vulnerability in program/steps/mail/func.inc in RoundCube Webmail before 0.8.0, when using the Larry skin, allows remote attackers to inject arbitrary web script or HTML via the email message subject.
CVSS Score: 2.6 (LOW)
CWE: CWE-79
References: http://secunia.com/advisories/50212; http://sourceforge.net/projects/roundcubemail/files/roundcubemail/0.8.0/; http://trac.roundcube.net/ticket/1488519
CVE: CVE-2012-3508
Published: 2012-08-25
Description: Cross-site scripting (XSS) vulnerability in program/lib/washtml.php in Roundcube Webmail 0.8.0 allows remote attackers to inject arbitrary web script or HTML by using "javascript:" in an href attribute in the body of an HTML-formatted email.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/50279; http://sourceforge.net/news/?group_id=139281&id=309011; http://trac.roundcube.net/ticket/1488613
CVE: CVE-2012-3514
Published: 2012-08-25
Description: OCaml Xml-Light Library before r234 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: http://secunia.com/advisories/50311; http://www.mandriva.com/security/advisories?name=MDVSA-2013:107; http://www.openwall.com/lists/oss-security/2012/08/21/2
CVE: CVE-2012-4667
Published: 2012-08-25
Description: Multiple cross-site scripting (XSS) vulnerabilities in SquidClamav 5.x before 5.8 allow remote attackers to inject arbitrary web script or HTML via the (1) url, (2) virus, (3) source, or (4) user parameter to (a) clwarn.cgi, (b) clwarn.cgi.de_DE, (c) clwarn.cgi.en_EN, (d) clwarn.cgi.fr_FR, (e) clwarn.cgi.pt_BR, or (f) clwarn.cgi.ru_RU in cgi-bin/.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://freecode.com/projects/squidclamav/releases/346722; http://squidclamav.darold.net/news.html; http://www.openwall.com/lists/oss-security/2012/08/16/2
CVE: CVE-2012-4668
Published: 2012-08-25
Description: Cross-site scripting (XSS) vulnerability in Roundcube Webmail 0.8.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the signature in an email.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://sourceforge.net/news/?group_id=139281&id=309011; http://trac.roundcube.net/ticket/1488613; http://www.openwall.com/lists/oss-security/2012/08/20/2
CVE: CVE-2012-3525
Published: 2012-08-25
Description: s2s/out.c in jabberd2 2.2.16 and earlier does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a (1) Verify Response or (2) Authorization Response.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce/2013/Mar/msg00002.html; http://rhn.redhat.com/errata/RHSA-2012-1538.html; http://rhn.redhat.com/errata/RHSA-2012-1539.html
CVE: CVE-2012-4669
Published: 2012-08-25
Description: M-Link R14.6 before R14.6v14 and R15.1 before R15.1v10 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20
References: http://isode.com/company/wordpress/xmpp-server-dialback/; http://xmpp.org/resources/security-notices/server-dialback/; http://isode.com/company/wordpress/xmpp-server-dialback/
CVE: CVE-2012-4670
Published: 2012-08-25
Description: Tigase XMPP Server before 5.1.0 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a (1) Verify Response or (2) Authorization Response.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-20
References: http://www.tigase.org/content/finally-version-510-final-available; http://xmpp.org/resources/security-notices/server-dialback/; https://exchange.xforce.ibmcloud.com/vulnerabilities/77985
CVE: CVE-2012-4671
Published: 2012-08-25
Description: psyced before 20120821 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20
References: http://www.psyced.org/files/psyced-20120821.tar.bz2; http://xmpp.org/resources/security-notices/server-dialback/; http://www.psyced.org/files/psyced-20120821.tar.bz2
CVE: CVE-2012-4672
Published: 2012-08-25
Description: Apple iChat Server does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20
References: http://xmpp.org/resources/security-notices/server-dialback/; https://exchange.xforce.ibmcloud.com/vulnerabilities/78133; http://xmpp.org/resources/security-notices/server-dialback/
CVE: CVE-2010-5150
Published: 2012-08-25
Description: Race condition in 3D EQSecure Professional Edition 4.2 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler execution, aka an argument-switch attack or a KHOBE attack.  NOTE: this issue is disputed by some third parties because it is a flaw in a protection mechanism for situations where a crafted program has already begun to execute
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-362
References: http://archives.neohapsis.com/archives/bugtraq/2010-05/0026.html; http://archives.neohapsis.com/archives/fulldisclosure/2010-05/0066.html; http://countermeasures.trendmicro.eu/you-just-cant-trust-a-drunk/
CVE: CVE-2010-5151
Published: 2012-08-25
Description: Race condition in avast! Internet Security 5.0.462 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler execution, aka an argument-switch attack or a KHOBE attack.  NOTE: this issue is disputed by some third parties because it is a flaw in a protection mechanism for situations where a crafted program has already begun to execute
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-362
References: http://archives.neohapsis.com/archives/bugtraq/2010-05/0026.html; http://archives.neohapsis.com/archives/fulldisclosure/2010-05/0066.html; http://countermeasures.trendmicro.eu/you-just-cant-trust-a-drunk/
CVE: CVE-2010-5152
Published: 2012-08-25
Description: Race condition in AVG Internet Security 9.0.791 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler execution, aka an argument-switch attack or a KHOBE attack.  NOTE: this issue is disputed by some third parties because it is a flaw in a protection mechanism for situations where a crafted program has already begun to execute
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-362
References: http://archives.neohapsis.com/archives/bugtraq/2010-05/0026.html; http://archives.neohapsis.com/archives/fulldisclosure/2010-05/0066.html; http://countermeasures.trendmicro.eu/you-just-cant-trust-a-drunk/
CVE: CVE-2010-5153
Published: 2012-08-25
Description: Race condition in Avira Premium Security Suite 10.0.0.536 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler execution, aka an argument-switch attack or a KHOBE attack.  NOTE: this issue is disputed by some third parties because it is a flaw in a protection mechanism for situations where a crafted program has already begun to execute
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-362, CWE-94
References: http://archives.neohapsis.com/archives/bugtraq/2010-05/0026.html; http://archives.neohapsis.com/archives/fulldisclosure/2010-05/0066.html; http://countermeasures.trendmicro.eu/you-just-cant-trust-a-drunk/