A vulnerability has been reported in Trend Micro Internet Security Pro 2010, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to the "extSetOwner()" method of the UfProxyBrowserCtrl ActiveX control (UfPBCtrl.dll) not validating the value passed via the "varOwner" argument and using it as a pointer.

Successful exploitation may allow execution of arbitrary code.

Solution
Apply hotfix (please see the vendor's advisory for details).

Provided and/or discovered by
Andrea Micalizzi aka rgod, reported via ZDI.

Changelog
Further details available to Secunia VIM customers

Original Advisory
ZDI:
http://www.zerodayinitiative.com/advisories/ZDI-10-165/

Trend Micro:
http://esupport.trendmicro.com/pages/Hot-Fix-UfPBCtrldll-is-vulnerable-to-remote-attackers.aspx

Deep Links
Links available to Secunia VIM customers