Lucene search

K
nvd[email protected]NVD:CVE-2010-3189
HistoryAug 31, 2010 - 8:00 p.m.

CVE-2010-3189

2010-08-3120:00:02
CWE-94
web.nvd.nist.gov
3

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.4

Confidence

Low

EPSS

0.957

Percentile

99.5%

The extSetOwner function in the UfProxyBrowserCtrl ActiveX control (UfPBCtrl.dll) in Trend Micro Internet Security Pro 2010 allows remote attackers to execute arbitrary code via an invalid address that is dereferenced as a pointer.

Affected configurations

Nvd
Node
trendmicrointernet_securityMatch2010-pro
VendorProductVersionCPE
trendmicrointernet_security2010cpe:2.3:a:trendmicro:internet_security:2010:-:pro:*:*:*:*:*

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.4

Confidence

Low

EPSS

0.957

Percentile

99.5%