CVE-2010-3189 The extSetOwner function in the UfProxyBrowserCtrl ActiveX control (UfPBCtrl.dll) in Trend Micro Internet Security Pro 2010 allows remote attackers to execute arbitrary code via an invalid address tha...
HighCVSS 9.3
EPSS 39.2%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The extSetOwner function in the UfProxyBrowserCtrl ActiveX control (UfPBCtrl.dll) in Trend Micro Internet Security Pro 2010 allows remote attackers to execute arbitrary code via an invalid address that is dereferenced as a pointer.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| trendmicro internet security | = 2010 | No fix listed |
References
- esupport.trendmicro.com patch vendor-advisory
- 41140 third-party-advisory vendor-advisory
- 20100825 ZDI-10-165: Trend Micro Internet Security Pro 2010 ActiveX extSetOwner Remote Code Execution Vulnerability mailing-list
- 1024364 vdb-entry
- ADV-2010-2185 vdb-entry vendor-advisory
- www.zerodayinitiative.com
- trend-micro-activex-code-execution(61397) vdb-entry
- oval:org.mitre.oval:def:7633 signature vdb-entry