EIP-2026-119220

This exploit targets a Unicode buffer overflow vulnerability in Trend Micro Internet Security Pro 2010's ActiveX control (UfPBCtrl.DLL). It uses a heap spray technique to achieve remote code execution by overwriting the EIP with a controlled address and executing shellcode (calc.exe payload).