CVEvulnerability
CVE-2010-3973
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-12-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-94
Description
The WMITools ActiveX control in WBEMSingleView.ocx 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted argument to the AddContextRef method, possibly an untrusted pointer dereference, aka "Microsoft WMITools ActiveX Control Vulnerability."
Affected configurations
• microsoft wmi administrative tools (<= 1.1)
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- http://blogs.technet.com/b/srd/archive/2011/01/07/assessing-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspx blogs.technet.com
- http://secunia.com/advisories/42693 Vendor Advisory
- http://www.exploit-db.com/exploits/15809 Exploit
- http://www.kb.cert.org/vuls/id/725596 US Government Resource
- http://www.securityfocus.com/bid/45546 Exploit
- http://www.vupen.com/english/advisories/2010/3301 Vendor Advisory
- http://www.wooyun.org/bug.php?action=view&id=1006 Exploit
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-027 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64250 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12475 oval.cisecurity.org
- http://blogs.technet.com/b/srd/archive/2011/01/07/assessing-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspx blogs.technet.com
- http://secunia.com/advisories/42693 Vendor Advisory
- http://www.exploit-db.com/exploits/15809 Exploit
- http://www.kb.cert.org/vuls/id/725596 US Government Resource
- http://www.securityfocus.com/bid/45546 Exploit
- http://www.vupen.com/english/advisories/2010/3301 Vendor Advisory
- http://www.wooyun.org/bug.php?action=view&id=1006 Exploit
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-027 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64250 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12475 oval.cisecurity.org