CVE-2010-3189 EXPLOIT
9.3
HIGH · CVSS 2.0 · EPSS 39.2% (pctl 99)
Patch early
A public exploit exists.
Description
The extSetOwner function in the UfProxyBrowserCtrl ActiveX control (UfPBCtrl.dll) in Trend Micro Internet Security Pro 2010 allows remote attackers to execute arbitrary code via an invalid address that is dereferenced as a pointer.
Scoring
| CVSS | 9.3 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:C/I:C/A:C |
| EPSS | 39.22% — more likely to be exploited than 99% of all CVEs |
| Weakness | CWE-94 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2010-08-31 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| trendmicro | internet security |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Trend Micro Internet Security Pro 2010 - ActiveX 'extSetOwner()' Remote Code Execution (Metasploit) | 2010-10-01 |
References
- http://esupport.trendmicro.com/pages/Hot-Fix-UfPBCtrldll-is-vulnerable-to-remote-attackers.aspx
- http://secunia.com/advisories/41140
- http://www.securityfocus.com/archive/1/513327/100/0/threaded
- http://www.securitytracker.com/id?1024364
- http://www.vupen.com/english/advisories/2010/2185
- http://www.zerodayinitiative.com/advisories/ZDI-10-165
- https://exchange.xforce.ibmcloud.com/vulnerabilities/61397
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7633
- http://esupport.trendmicro.com/pages/Hot-Fix-UfPBCtrldll-is-vulnerable-to-remote-attackers.aspx
- http://secunia.com/advisories/41140
- http://www.securityfocus.com/archive/1/513327/100/0/threaded
- http://www.securitytracker.com/id?1024364
- http://www.vupen.com/english/advisories/2010/2185
- http://www.zerodayinitiative.com/advisories/ZDI-10-165
- https://exchange.xforce.ibmcloud.com/vulnerabilities/61397
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7633
→ the Explorer · watch your stack · NVD