Trend Micro Internet Security Pro ActiveX Control extSetOwner code execution

Added: 09/02/2010 CVE: CVE-2010-3189 BID: 42717 OSVDB: 67561 Background Trend Micro Internet Security Pro is a virus protection and Internet security product for home users. Problem A vulnerability in the UfPBCtrl.dll ActiveX control allows command execution when a user loads a web page which cal...

Trend Micro Internet Security Pro ActiveX Control extSetOwner code execution

Added: 09/02/2010 CVE: CVE-2010-3189 BID: 42717 OSVDB: 67561 Background Trend Micro Internet Security Pro is a virus protection and Internet security product for home users. Problem A vulnerability in the UfPBCtrl.dll ActiveX control allows command execution when a user loads a web page which cal...

Null pointer dereference

The extSetOwner function in the UfProxyBrowserCtrl ActiveX control UfPBCtrl.dll in Trend Micro Internet Security Pro 2010 allows remote attackers to execute arbitrary code via an invalid address that is dereferenced as a pointer...

CVE-2010-3189

CVE-2010-3189 affects Trend Micro Internet Security Pro 2010, via the UfProxyBrowserCtrl ActiveX extSetOwner() in UfPBCtrl.dll. The vulnerability allows remote code execution when an attacker entices a user to view a crafted HTML document; an invalid address is dereferenced as a pointer, enabling...

Trend Micro Internet Security ActiveX code execution

Code execution via extSetOwner...