CVE-2010-3973

CRITICAL 9.3CVE-2010-3973 · Published 23/12/2010 · updated 16/06/2026

Package	Affected versions	Patched versions
wmi administrative tools microsoft	`≤ 1.1`	No fix yet

Description

The WMITools ActiveX control in WBEMSingleView.ocx 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted argument to the AddContextRef method, possibly an untrusted pointer dereference, aka "Microsoft WMITools ActiveX Control Vulnerability."

References

blogs.technet.com/b/srd/archive/2011/01/07/assessing-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspx
secunia.com/advisories/42693 · Vendor Advisory
exploit-db.com/exploits/15809 · Exploit
kb.cert.org/vuls/id/725596 · US Government Resource
securityfocus.com/bid/45546 · Exploit
vupen.com/english/advisories/2010/3301 · Vendor Advisory
wooyun.org/bug.php · Exploit
docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-027
exchange.xforce.ibmcloud.com/vulnerabilities/64250
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12475

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free