Sign-up

ID

VAR-201008-0385


TITLE

Trend Micro Internet Security Pro 2010 ActiveX extSetOwner Remote code execution vulnerability

Trust: 0.8

sources: IVD: 05bb0856-1fb1-11e6-abef-000c29c66e3d // CNVD: CNVD-2010-1697

DESCRIPTION

Trend Micro Internet Security Pro 2010 is a security protection release from Trend Micro. The UfPBCtrl.dll ActiveX control is flawed. The extSetOwner function takes a parameter and assumes that it is an initialized pointer. Specifying an illegal address allows the attacker to force the process to call the controllable memory domain and eventually execute arbitrary code in the browser security context

Trust: 0.72

sources: CNVD: CNVD-2010-1697 // IVD: 05bb0856-1fb1-11e6-abef-000c29c66e3d

IOT TAXONOMY

category:['ICS']sub_category: -

Trust: 0.8

sources: IVD: 05bb0856-1fb1-11e6-abef-000c29c66e3d // CNVD: CNVD-2010-1697

AFFECTED PRODUCTS

vendor:trend micromodel:internet security proscope:eqversion:2010

Trust: 0.8

sources: IVD: 05bb0856-1fb1-11e6-abef-000c29c66e3d // CNVD: CNVD-2010-1697

CVSS

SEVERITY

CVSSV2

CVSSV3

IVD: 05bb0856-1fb1-11e6-abef-000c29c66e3d
value: MEDIUM

Trust: 0.2

IVD: 05bb0856-1fb1-11e6-abef-000c29c66e3d
severity: NONE
baseScore: NONE
vectorString: NONE
accessVector: NONE
accessComplexity: NONE
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: NONE
impactScore: NONE
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: UNKNOWN

Trust: 0.2

sources: IVD: 05bb0856-1fb1-11e6-abef-000c29c66e3d

TYPE

Code injection

Trust: 0.2

sources: IVD: 05bb0856-1fb1-11e6-abef-000c29c66e3d

PATCH

title:Trend Micro Internet Security Pro 2010 ActiveX extSetOwner remote code execution patchurl:https://www.cnvd.org.cn/patchinfo/show/883

Trust: 0.6

sources: CNVD: CNVD-2010-1697

EXTERNAL IDS

db:CNVDid:CNVD-2010-1697

Trust: 0.8

db:IVDid:05BB0856-1FB1-11E6-ABEF-000C29C66E3D

Trust: 0.2

sources: IVD: 05bb0856-1fb1-11e6-abef-000c29c66e3d // CNVD: CNVD-2010-1697

REFERENCES

url:http://archives.neohapsis.com/archives/fulldisclosure/2010-08/0295.html

Trust: 0.6

sources: CNVD: CNVD-2010-1697

SOURCES

db:IVDid:05bb0856-1fb1-11e6-abef-000c29c66e3d
db:CNVDid:CNVD-2010-1697

LAST UPDATE DATE

2022-05-17T02:06:07.030000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2010-1697date:2010-08-26T00:00:00

SOURCES RELEASE DATE

db:IVDid:05bb0856-1fb1-11e6-abef-000c29c66e3ddate:2010-08-26T00:00:00
db:CNVDid:CNVD-2010-1697date:2010-08-26T00:00:00