Published: 23/12/2010 Updated: 12/10/2018

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 940

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

The WMITools ActiveX control in WBEMSingleView.ocx 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and previous versions in Microsoft Windows XP SP2 and SP3 allows remote malicious users to execute arbitrary code via a crafted argument to the AddContextRef method, possibly an untrusted pointer dereference, aka "Microsoft WMITools ActiveX Control Vulnerability."

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft wmi administrative tools

Check Point Reference: CPAI-2010-0686 Date Published: 10 Dec 2023 Severity: High ...

Exploit-DB Notes: Original credit goes to "牛奶坦克" via WooYun: wwwwooyunorg/bugs/wooyun-2010-01006 <html> <object classid="clsid:2745E5F5-D234-11D0-847A-00C04FD7BB08" id="target"></object> <SCRIPT language="JavaScript"> //run calcexe var shellcode = unescape("%uc92b%ue983%ud9de%ud9ee%u2474%u5bf4%u7381% ...

## # $Id: wmi_admintoolsrb 11579 2011-01-14 16:25:37Z jduck $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' class ...

CWE-94 http://secunia.com/advisories/42693 http://www.kb.cert.org/vuls/id/725596 http://www.wooyun.org/bug.php?action=view&id=1006 http://www.securityfocus.com/bid/45546 http://www.exploit-db.com/exploits/15809 http://www.vupen.com/english/advisories/2010/3301 http://blogs.technet.com/b/srd/archive/2011/01/07/assessing-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspx https://exchange.xforce.ibmcloud.com/vulnerabilities/64250 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12475 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-027 https://nvd.nist.gov https://www.exploit-db.com/exploits/15809/https://advisories.checkpoint.com/defense/advisories/public/2023/cpai-2010-0686.html

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2010-3973

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect