CVE-2010-3189

This is a Metasploit module exploiting a remote code execution vulnerability in Trend Micro Internet Security Pro 2010 ActiveX control via the extSetOwner() function. It uses a heap spray technique to achieve reliable exploitation.

This Metasploit module exploits a remote code execution vulnerability in Trend Micro Internet Security Pro 2010 by leveraging an invalid pointer in the extSetOwner() function of UfPBCtrl.dll. It uses a heap spray technique to achieve reliable exploitation via a malicious HTML page.