Unscored severity · published Aug 31, 2010
CVE-2010-3189
The extSetOwner function in the UfProxyBrowserCtrl ActiveX control (UfPBCtrl.dll) in Trend Micro Internet Security Pro 2010 allows remote attackers to execute arbitrary code via…
–
CVSS
39.2%
EPSS
No
On KEV
Description
The extSetOwner function in the UfProxyBrowserCtrl ActiveX control (UfPBCtrl.dll) in Trend Micro Internet Security Pro 2010 allows remote attackers to execute arbitrary code via an invalid address that is dereferenced as a pointer.
Exploitation
Is it being used?
Exploit prediction (EPSS)39.2% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IS
Internet Security · Trendmicro
2010 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-3189
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-3189
Patch
http://esupport.trendmicro.com/pages/Hot-Fix-UfPBCtrldll-is-vulnerable-to-remote-attackers.aspx
Vendor Advisory
http://secunia.com/advisories/41140
www.securityfocus.com
http://www.securityfocus.com/archive/1/513327/100/0/threaded
www.securitytracker.com
http://www.securitytracker.com/id?1024364
Vendor Advisory
http://www.vupen.com/english/advisories/2010/2185
www.zerodayinitiative.com
http://www.zerodayinitiative.com/advisories/ZDI-10-165
More from Internet Security
9.8
CVE-2018-3608
A vulnerability in Trend Micro Maximum Security's (Consumer) 2018 (versions 12.0.1191 and below) User-Mode Hooking (UMH) driver could allow an attacker to create a specially…
7.8
CVE-2024-23940
Trend Micro uiAirSupport, included in the Trend Micro Security 2023 family of consumer products, version 6.0.2092 and below is vulnerable to a DLL hijacking/proxying…
7.8
CVE-2018-18333
A DLL hijacking vulnerability in Trend Micro Security 2019 (Consumer) versions below 15.0.0.1163 and below could allow an attacker to manipulate a specific DLL and escalate…
7.8
CVE-2018-15363
An Out-of-Bounds Read Privilege Escalation vulnerability in Trend Micro Security 2018 (Consumer) products could allow a local attacker to escalate privileges on vulnerable…
7.8
CVE-2018-10514
A Missing Impersonation Privilege Escalation vulnerability in Trend Micro Security 2018 (Consumer) products could allow a local attacker to escalate privileges on vulnerable…