CVE-2010-3973

60Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 72%

from disclosure to weapon0 days

Published on NVDDec 23

1st PoCDec 22

metasploitDec 21

exploitation probability

72%top 1% of all CVEs

observed exploitation

nono source reports it

3 public exploit(s)

The WMITools ActiveX control in WBEMSingleView.ocx 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted argument to the AddContextRef method, possibly an untrusted pointer dereference, aka "Microsoft WMITools ActiveX Control Vulnerability."

Affected products

n/a · n/a

public PoCs found — 3✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/15809 exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/16516 cve_referencewww.exploit-db.com/exploits/15809unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://blogs.technet.com/b/srd/archive/2011/01/07/assessing-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspx https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-027 http://secunia.com/advisories/42693 https://exchange.xforce.ibmcloud.com/vulnerabilities/64250 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12475 http://www.exploit-db.com/exploits/15809 http://www.kb.cert.org/vuls/id/725596 http://www.securityfocus.com/bid/45546 http://www.vupen.com/english/advisories/2010/3301 http://www.wooyun.org/bug.php?action=view&id=1006