CVE Feed

    Dashboard / CVE / CVE-2010-3189

    CVE-2010-3189

    The extSetOwner function in the UfProxyBrowserCtrl ActiveX control (UfPBCtrl.dll) in Trend Micro Internet Security Pro 2010 allows remote attackers to execute arbitrary code via an invalid address that is dereferenced as a pointer.

    Published:Aug 31, 2010
    Last Modified:Apr 11, 2025
    EPS:Aug 31, 2010
    EPSS Score:0.7604
    CVSS Score:9.3

    Affected Products

    Vendor
    Trendmicro
    Product
    Internet Security

    Exploits

    https://www.exploit-db.com/exploits/15168

    Related CVEs

    CVE-2024-23940 (CVSS 7.8) — Trend Micro uiAirSupport, included in the Trend Micro Security 2023 family of consumer products, version 6.0.2…
    CVE-2021-43772 (CVSS 5.5) — Trend Micro Security 2021 v17.0 (Consumer) contains a vulnerability that allows files inside the protected fol…
    CVE-2018-18333 (CVSS 7.8) — A DLL hijacking vulnerability in Trend Micro Security 2019 (Consumer) versions below 15.0.0.1163 and below cou…
    CVE-2018-10514 (CVSS 7.8) — A Missing Impersonation Privilege Escalation vulnerability in Trend Micro Security 2018 (Consumer) products co…
    CVE-2018-15363 (CVSS 7.8) — An Out-of-Bounds Read Privilege Escalation vulnerability in Trend Micro Security 2018 (Consumer) products coul…
    CVE-2018-10513 (CVSS 7.8) — A Deserialization of Untrusted Data Privilege Escalation vulnerability in Trend Micro Security 2018 (Consumer)…
    CVE-2018-3608 (CVSS 9.8) — A vulnerability in Trend Micro Maximum Security's (Consumer) 2018 (versions 12.0.1191 and below) User-Mode Hoo…
    CVE-2018-6234 (CVSS 5.5) — An Out-of-Bounds Read Information Disclosure vulnerability in Trend Micro Maximum Security (Consumer) 2018 cou…
    CVE-2018-6235 (CVSS 7.8) — An Out-of-Bounds write privilege escalation vulnerability in Trend Micro Maximum Security (Consumer) 2018 coul…
    CVE-2018-6233 (CVSS 7.8) — A buffer overflow privilege escalation vulnerability in Trend Micro Maximum Security (Consumer) 2018 could all…

    References

    http://esupport.trendmicro.com/pages/Hot-Fix-UfPBCtrldll-is-vulnerable-to-remote-attackers.aspx
    http://secunia.com/advisories/41140
    http://www.securityfocus.com/archive/1/513327/100/0/threaded
    http://www.securitytracker.com/id?1024364
    http://www.vupen.com/english/advisories/2010/2185
    http://www.zerodayinitiative.com/advisories/ZDI-10-165
    https://exchange.xforce.ibmcloud.com/vulnerabilities/61397
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7633
    http://esupport.trendmicro.com/pages/Hot-Fix-UfPBCtrldll-is-vulnerable-to-remote-attackers.aspx
    http://secunia.com/advisories/41140
    http://www.securityfocus.com/archive/1/513327/100/0/threaded
    http://www.securitytracker.com/id?1024364
    http://www.vupen.com/english/advisories/2010/2185
    http://www.zerodayinitiative.com/advisories/ZDI-10-165
    https://exchange.xforce.ibmcloud.com/vulnerabilities/61397
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7633

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High