CVEvulnerability
CVE-2010-3189
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-08-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-94
Description
The extSetOwner function in the UfProxyBrowserCtrl ActiveX control (UfPBCtrl.dll) in Trend Micro Internet Security Pro 2010 allows remote attackers to execute arbitrary code via an invalid address that is dereferenced as a pointer.
Affected configurations
• trendmicro internet security 2010
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
Referenced by CWE · observed example (1)
- CWE-822 Untrusted Pointer Dereference weakness
References
- http://esupport.trendmicro.com/pages/Hot-Fix-UfPBCtrldll-is-vulnerable-to-remote-attackers.aspx Patch, Vendor Advisory
- http://secunia.com/advisories/41140 Vendor Advisory
- http://www.securityfocus.com/archive/1/513327/100/0/threaded www.securityfocus.com
- http://www.securitytracker.com/id?1024364 www.securitytracker.com
- http://www.vupen.com/english/advisories/2010/2185 Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-10-165 www.zerodayinitiative.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/61397 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7633 oval.cisecurity.org
- http://esupport.trendmicro.com/pages/Hot-Fix-UfPBCtrldll-is-vulnerable-to-remote-attackers.aspx Patch, Vendor Advisory
- http://secunia.com/advisories/41140 Vendor Advisory
- http://www.securityfocus.com/archive/1/513327/100/0/threaded www.securityfocus.com
- http://www.securitytracker.com/id?1024364 www.securitytracker.com
- http://www.vupen.com/english/advisories/2010/2185 Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-10-165 www.zerodayinitiative.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/61397 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7633 oval.cisecurity.org