CVE-2010-3189

Description

The extSetOwner function in the UfProxyBrowserCtrl ActiveX control (UfPBCtrl.dll) in Trend Micro Internet Security Pro 2010 allows remote attackers to execute arbitrary code via an invalid address that is dereferenced as a pointer.

References

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7633

https://exchange.xforce.ibmcloud.com/vulnerabilities/61397

http://www.zerodayinitiative.com/advisories/ZDI-10-165

http://www.vupen.com/english/advisories/2010/2185

http://www.securitytracker.com/id?1024364

http://www.securityfocus.com/archive/1/513327/100/0/threaded

http://secunia.com/advisories/41140

http://esupport.trendmicro.com/pages/Hot-Fix-UfPBCtrldll-is-vulnerable-to-remote-attackers.aspx

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS