CVE-2010-5179: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in Trend Micro Internet Security Pro 2010 17.50.1647.0000 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memor...

Trend Micro Internet Security Pro 2010 ActiveX extSetOwner() Remote Code Execution

trendmicroextsetowner.rb Trend Micro Internet Security Pro 2010 ActiveX extSetOwner Remote Code Execution exploit for the Metasploit Framework Exploit successfully tested on the following platforms: - Trend Micro Internet Security Pro 2010 on Internet Explorer 7, Windows XP SP3 - Trend Micro...

Trend Micro Internet Security Pro 2010 - ActiveX 'extSetOwner()' Remote Code Execution (Metasploit)

$Id: trendmicroextsetowner.rb 10538 2010-10-04 04:26:09Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Trend Micro Internet Security Pro ActiveX Control extSetOwner code execution

Added: 09/02/2010 CVE: CVE-2010-3189 BID: 42717 OSVDB: 67561 Background Trend Micro Internet Security Pro is a virus protection and Internet security product for home users. Problem A vulnerability in the UfPBCtrl.dll ActiveX control allows command execution when a user loads a web page which cal...

Trend Micro Internet Security Pro ActiveX Control extSetOwner code execution

Added: 09/02/2010 CVE: CVE-2010-3189 BID: 42717 OSVDB: 67561 Background Trend Micro Internet Security Pro is a virus protection and Internet security product for home users. Problem A vulnerability in the UfPBCtrl.dll ActiveX control allows command execution when a user loads a web page which cal...

Trend Micro Internet Security Pro ActiveX Control extSetOwner code execution

Added: 09/02/2010 CVE: CVE-2010-3189 BID: 42717 OSVDB: 67561 Background Trend Micro Internet Security Pro is a virus protection and Internet security product for home users. Problem A vulnerability in the UfPBCtrl.dll ActiveX control allows command execution when a user loads a web page which cal...

Null pointer dereference

The extSetOwner function in the UfProxyBrowserCtrl ActiveX control UfPBCtrl.dll in Trend Micro Internet Security Pro 2010 allows remote attackers to execute arbitrary code via an invalid address that is dereferenced as a pointer...

DSquare Exploit Pack: D2SEC_TISPRO

Name| d2sectispro ---|--- CVE| CVE-2010-3189 Exploit Pack| D2ExploitPack Description| Trend Micro Internet Security Pro 2010 UfProxyBrowserCtrl ActiveX Remote Code Execution Vulnerability Notes|...

CVE-2010-3189

The extSetOwner function in the UfProxyBrowserCtrl ActiveX control UfPBCtrl.dll in Trend Micro Internet Security Pro 2010 allows remote attackers to execute arbitrary code via an invalid address that is dereferenced as a pointer...

CVE-2010-3189

CVE-2010-3189 affects Trend Micro Internet Security Pro 2010, via the UfProxyBrowserCtrl ActiveX extSetOwner() in UfPBCtrl.dll. The vulnerability allows remote code execution when an attacker entices a user to view a crafted HTML document; an invalid address is dereferenced as a pointer, enabling...

CVE-2010-3189: Improper Control of Generation of Code

The extSetOwner function in the UfProxyBrowserCtrl ActiveX control UfPBCtrl.dll in Trend Micro Internet Security Pro 2010 allows remote attackers to execute arbitrary code via an invalid address that is dereferenced as a pointer...

Trend Micro Internet Security Pro 2010 ActiveX extSetOwner Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Internet Security Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

Trend Micro Internet Security Pro privilege escalation

tmactmon.sys driver IOCTL processing privilege escalation...

CVE-2007-6386: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in PccScan.dll before build 1451 in Trend Micro AntiVirus plus AntiSpyware 2008, Internet Security 2008, and Internet Security Pro 2008 allows user-assisted remote attackers to cause a denial of service SfCtlCom.exe crash, and allows local users to gain privileges, via...