CVE-2010-3973 The WMITools ActiveX control in WBEMSingleView.ocx 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary co...
HighCVSS 9.3
EPSS 71.7%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The WMITools ActiveX control in WBEMSingleView.ocx 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted argument to the AddContextRef method, possibly an untrusted pointer dereference, aka "Microsoft WMITools ActiveX Control Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft wmi administrative tools | <= 1.1 | No fix listed |
References
- blogs.technet.com
- 42693 third-party-advisory vendor-advisory
- 15809 exploit
- VU#725596 third-party-advisory us-government-resource
- 45546 exploit vdb-entry
- ADV-2010-3301 vdb-entry vendor-advisory
- www.wooyun.org exploit
- MS11-027 vendor-advisory
- ms-wmi-wbemsingleview-ce(64250) vdb-entry
- oval:org.mitre.oval:def:12475 signature vdb-entry