Signature Detail

HTTP: Trend Micro Internet Security Pro 2010 ActiveX extSetOwner Remote Code Execution

This signature detects attempts to exploit a known code execution vulnerability in Trend Micro Security Pro 2010 ActiveX control. It is due to an error while parsing a parameter to the extSetOwner function. By specifying a specially crafted address, the process can call into a controlled memory region. An attacker can exploit this by enticing a user to visit a maliciously crafted Web site. A successful attack can result in code execution under the privileges of the Web browser.

Extended Description

Trend Micro Internet Security Pro is prone to a remote code-execution vulnerability that affects the 'AccWizObjects' ActiveX control. An attacker can exploit this issue by enticing an unsuspecting user to view a malicious webpage. Successful exploits will allow the attacker to execute arbitrary code within the context of the application (typically Internet Explorer) that uses the ActiveX control. Trend Micro Internet Security Pro 2010 is vulnerable; other versions may also be affected.

Affected Products

• Trend Micro Internet Security Pro 2010

References

• BugTraq: 42717
• CVE: CVE-2010-3189
• URL: http://xforce.iss.net/xforce/xfdb/61397