CVE-2017-15920

In Watchdog Development Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver has a NULL pointer dereference when handling IOCTL 0x80002054 due to an input buffer being NULL or size 0. This is a hardware/driver-level issue within zam32.sys and is documented...

CVE-2017-15921

CVE-2017-15921 affects Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150. The zam32.sys driver contains a NULL pointer dereference that is triggered when sending an operation to ioctl 0x80002010, due to input buffers being NULL or input buffer size 0 not being validated. Pub...

Watchdog Development Anti-Malware / Online Security Pro - NULL Pointer Dereference

/ Exploit Title - Watchdog Development Anti-Malware/Online Security Pro Null Pointer Dereference Date - 26th October 2017 Discovered by - Parvez Anwar @parvezghh Vendor Homepage - https://www.watchdogdevelopment.com/ Tested Version - 2.74.186.150 Driver Version - 2.21.63 - zam32.sys Tested on OS ...

Watchdog Development Anti-Malware Online Security Pro - NULL Pointer Dereference

Watchdog Development Anti-Malware Online Security Pro - NULL Pointer Dereference / Exploit Title - Watchdog Development Anti-Malware/Online Security Pro Null Pointer Dereference Date - 26th October 2017 Discovered by - Parvez Anwar @parvezghh Vendor Homepage - https://www.watchdogdevelopment.com/...

CVE-2010-5179

Race condition in Trend Micro Internet Security Pro 2010 17.50.1647.0000 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memor...

PT-2012-1391 · Trend Micro · Trend Micro Internet Security Pro

Name of the Vulnerable Software and Affected Versions: Trend Micro Internet Security Pro 2010 version 17.50.1647.0000 Description: A race condition issue allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a handler but not blocked ...

Trend Micro Internet Security Pro 2010 - ActiveX extSetOwner Remote Code Execution

Trend Micro Internet Security Pro 2010 ActiveX extSetOwner Remote Code Execution. CVE-2010-3189. Remote exploit for windows platform $Id: trendmicroextsetowner.rb 10538 2010-10-04 04:26:09Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial...

Trend Micro Internet Security Pro UfProxyBrowserCtrl ActiveX extSetOwner Function Arbitrary Code Execution

The UfProxyBrowserCtrl ActiveX control, a component of Trend Micro Internet Security Pro 2010 installed on the remote Windows host, reportedly has an issue in its 'extSetOwner' function that allows a remote attacker to run arbitrary code via an invalid address that is dereferenced as a pointer. I...

Trend Micro Internet Security Pro ActiveX extSetOwner() Code Execution

Exploit for windows platform in category remote exploits ====================================================================== Trend Micro Internet Security Pro ActiveX extSetOwner Code Execution ====================================================================== trendmicroextsetowner.rb Tren...

Trend Micro Internet Security Pro 2010 - ActiveX 'extSetOwner()' Remote Code Execution (Metasploit)

$Id: trendmicroextsetowner.rb 10538 2010-10-04 04:26:09Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Trend Micro Internet Security Pro 2010 ActiveX extSetOwner() Remote Code Execution

trendmicroextsetowner.rb Trend Micro Internet Security Pro 2010 ActiveX extSetOwner Remote Code Execution exploit for the Metasploit Framework Exploit successfully tested on the following platforms: - Trend Micro Internet Security Pro 2010 on Internet Explorer 7, Windows XP SP3 - Trend Micro...

Trend Micro Internet Security Pro 'UfPBCtrl.dll' Code Execution Vulnerability

Trend Micro Internet Security Pro is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Trend Micro Internet Security Pro ActiveX Control extSetOwner code execution

Added: 09/02/2010 CVE: CVE-2010-3189 BID: 42717 OSVDB: 67561 Background Trend Micro Internet Security Pro is a virus protection and Internet security product for home users. Problem A vulnerability in the UfPBCtrl.dll ActiveX control allows command execution when a user loads a web page which cal...

Trend Micro Internet Security Pro ActiveX Control extSetOwner code execution

Added: 09/02/2010 CVE: CVE-2010-3189 BID: 42717 OSVDB: 67561 Background Trend Micro Internet Security Pro is a virus protection and Internet security product for home users. Problem A vulnerability in the UfPBCtrl.dll ActiveX control allows command execution when a user loads a web page which cal...

Trend Micro Internet Security Pro ActiveX Control extSetOwner code execution

Added: 09/02/2010 CVE: CVE-2010-3189 BID: 42717 OSVDB: 67561 Background Trend Micro Internet Security Pro is a virus protection and Internet security product for home users. Problem A vulnerability in the UfPBCtrl.dll ActiveX control allows command execution when a user loads a web page which cal...

DSquare Exploit Pack: D2SEC_TISPRO

Name| d2sectispro ---|--- CVE| CVE-2010-3189 Exploit Pack| D2ExploitPack Description| Trend Micro Internet Security Pro 2010 UfProxyBrowserCtrl ActiveX Remote Code Execution Vulnerability Notes|...

Null pointer dereference

The extSetOwner function in the UfProxyBrowserCtrl ActiveX control UfPBCtrl.dll in Trend Micro Internet Security Pro 2010 allows remote attackers to execute arbitrary code via an invalid address that is dereferenced as a pointer...

CVE-2010-3189

The extSetOwner function in the UfProxyBrowserCtrl ActiveX control UfPBCtrl.dll in Trend Micro Internet Security Pro 2010 allows remote attackers to execute arbitrary code via an invalid address that is dereferenced as a pointer...

CVE-2010-3189

CVE-2010-3189 affects Trend Micro Internet Security Pro 2010, via the UfProxyBrowserCtrl ActiveX extSetOwner() in UfPBCtrl.dll. The vulnerability allows remote code execution when an attacker entices a user to view a crafted HTML document; an invalid address is dereferenced as a pointer, enabling...

Trend Micro Internet Security Pro 2010 ActiveX extSetOwner Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Internet Security Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...