Exploitation Summary
EIP tracks 2 public exploits for CVE-2010-3189.
PoCs published by Trancer, including Metasploit module exploits/windows/browser/trendmicro_extsetowner.
AI-analyzed exploit summary This is a Metasploit module exploiting a remote code execution vulnerability in Trend Micro Internet Security Pro 2010 ActiveX control via the extSetOwner() function. It uses a heap spray technique to achieve reliable exploitation.
Description
The extSetOwner function in the UfProxyBrowserCtrl ActiveX control (UfPBCtrl.dll) in Trend Micro Internet Security Pro 2010 allows remote attackers to execute arbitrary code via an invalid address that is dereferenced as a pointer.
Exploits (2)
This is a Metasploit module exploiting a remote code execution vulnerability in Trend Micro Internet Security Pro 2010 ActiveX control via the extSetOwner() function. It uses a heap spray technique to achieve reliable exploitation.
This Metasploit module exploits a remote code execution vulnerability in Trend Micro Internet Security Pro 2010 by leveraging an invalid pointer in the extSetOwner() function of UfPBCtrl.dll. It uses a heap spray technique to achieve reliable exploitation via a malicious HTML page.