Published: 23/12/2010 Updated: 19/01/2011

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 935

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

The WBEMSingleView.ocx ActiveX control 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and previous versions allows remote malicious users to execute arbitrary code via a crafted argument to the ReleaseContext method, a different vector than CVE-2010-3973, possibly an untrusted pointer dereference.

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft wmi administrative tools

Exploit-DB Notes: Original credit goes to "牛奶坦克" via WooYun: wwwwooyunorg/bugs/wooyun-2010-01006 <html> <object classid="clsid:2745E5F5-D234-11D0-847A-00C04FD7BB08" id="target"></object> <SCRIPT language="JavaScript"> //run calcexe var shellcode = unescape("%uc92b%ue983%ud9de%ud9ee%u2474%u5bf4%u7381% ...

CWE-94 http://secunia.com/advisories/42693 http://www.wooyun.org/bug.php?action=view&id=1006 http://twitter.com/carsteneiram/status/17526155733110784 http://www.kb.cert.org/vuls/id/725596 http://blogs.technet.com/b/srd/archive/2011/01/07/assessing-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspx https://nvd.nist.gov https://www.exploit-db.com/exploits/15809/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2010-4588

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect