CVE-2010-4588

CRÍTICO 9.3CVE-2010-4588 · Published 23/12/2010 · updated 16/06/2026

En resumen

CVE-2010-4588 es una vulnerabilidad CRÍTICO (CVSS 9.3) que afecta a wmi administrative tools (microsoft).
Probabilidad de explotación en los próximos 30 días (EPSS): 32.3%, mayor que el 98.3% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
wmi administrative tools microsoft	`≤ 1.1`	No fix yet

Description

The WBEMSingleView.ocx ActiveX control 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier allows remote attackers to execute arbitrary code via a crafted argument to the ReleaseContext method, a different vector than CVE-2010-3973, possibly an untrusted pointer dereference.

References

blogs.technet.com/b/srd/archive/2011/01/07/assessing-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspx
secunia.com/advisories/42693 · Vendor Advisory
twitter.com/carsteneiram/status/17526155733110784
kb.cert.org/vuls/id/725596 · US Government Resource
wooyun.org/bug.php · Exploit

Más vulnerabilidades de wmi administrative tools

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free