CVE-2010-3973

Description

The WMITools ActiveX control in WBEMSingleView.ocx 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted argument to the AddContextRef method, possibly an untrusted pointer dereference, aka "Microsoft WMITools ActiveX Control Vulnerability."

References

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12475

https://exchange.xforce.ibmcloud.com/vulnerabilities/64250

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-027

http://www.vupen.com/english/advisories/2010/3301

http://www.kb.cert.org/vuls/id/725596

http://secunia.com/advisories/42693

http://blogs.technet.com/b/srd/archive/2011/01/07/assessing-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspx

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS