The WMITools ActiveX control in WBEMSingleView.ocx 1.50.1131.0 in Microsoft WMI...
Vulnerability Description
The WMITools ActiveX control in WBEMSingleView.ocx 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted argument to the AddContextRef method, possibly an untrusted pointer dereference, aka "Microsoft WMITools ActiveX Control Vulnerability."
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2010-3973
Credits & Attribution
No credits recorded in the NVD database.
References
- http://blogs.technet.com/b/srd/archive/2011/01/07/assessing-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspx
- http://www.vupen.com/english/advisories/2010/3301
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12475
- http://www.kb.cert.org/vuls/id/725596
- http://www.wooyun.org/bug.php?action=view&id=1006
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-027
- http://www.securityfocus.com/bid/45546
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64250
- http://www.exploit-db.com/exploits/15809
- http://secunia.com/advisories/42693
More from microsoft
View All →Affected Vendor
microsoft
View all reports →Affected Software
Timeline
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.