CVE-2010-3189

CVE-2010-3189 describes a critical remote code execution vulnerability in the UfProxyBrowserCtrl ActiveX control (UfPBCtrl.dll) within Trend Micro Internet Security Pro 2010. An attacker could exploit this by providing an invalid address to the extSetOwner function, leading to a dereferenced pointer and arbitrary code execution. With a CVSS score of 9.3, this vulnerability is highly severe, requiring no authentication and moderate attack complexity to achieve complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, a Metasploit module exists, indicating readily available exploit code, though there is no evidence of active exploitation or significant community discussion.