CVE-2010-5178

CVE-2010-5178 describes a race condition in ThreatFire 4.7.0.17 on Windows XP, allowing local users to bypass kernel-mode hook handlers and execute dangerous code. This vulnerability, also known as an argument-switch or KHOBE attack, arises from user-space memory changes during hook-handler execution, affecting Microsoft and PC Tools ThreatFire on Windows XP. With a CVSS score of 6.2, it has a local attack vector and high attack complexity, but could lead to complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.