Null pointer dereference

The extSetOwner function in the UfProxyBrowserCtrl ActiveX control UfPBCtrl.dll in Trend Micro Internet Security Pro 2010 allows remote attackers to execute arbitrary code via an invalid address that is dereferenced as a pointer...

CVE-2010-3189

The extSetOwner function in the UfProxyBrowserCtrl ActiveX control UfPBCtrl.dll in Trend Micro Internet Security Pro 2010 allows remote attackers to execute arbitrary code via an invalid address that is dereferenced as a pointer...

CVE-2010-3189

CVE-2010-3189 affects Trend Micro Internet Security Pro 2010, via the UfProxyBrowserCtrl ActiveX extSetOwner() in UfPBCtrl.dll. The vulnerability allows remote code execution when an attacker entices a user to view a crafted HTML document; an invalid address is dereferenced as a pointer, enabling...

Trend Micro Internet Security Pro 2010 ActiveX extSetOwner Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Internet Security Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

Cross site request forgery (csrf)

The TrendMicro Activity Monitor Module tmactmon.sys 2.52.0.1002 in Trend Micro Internet Pro 2008 and 2009, and Security Pro 2008 and 2009, allows local users to gain privileges via a crafted IRP in a METHODNEITHER IOCTL request to \Device\tmactmon that overwrites memory...

Trend Micro Internet Security Pro privilege escalation

tmactmon.sys driver IOCTL processing privilege escalation...