Russian Vulnerability Scanner Database

Back to List

CVE-2010-3973

Scores

EPSS

0.827high82.7%
0%20%40%60%80%100%

Percentile: 82.7%

CVSS

9.3critical2.0
0246810

CVSS Score: 9.3/10

All CVSS Scores

CVSS 2.0
9.3

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Description

The WMITools ActiveX control in WBEMSingleView.ocx 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted argument to the AddContextRef method, possibly an untrusted pointer dereference, aka “Microsoft WMITools ActiveX Control Vulnerability.”

Scaner-VS 7 — a modern vulnerability management solution

Uses this database for vulnerability detection. High-speed search, cross-platform, advanced configuration audit, and flexible filtering. Suitable for organizations of any size.
Learn more about Scaner-VS 7

Sources

nvd

CWEs

CWE-94

Exploits

Exploit ID: 15809

Source: exploitdb

URL: https://www.exploit-db.com/exploits/15809

Exploit ID: 16516

Source: exploitdb

URL: https://www.exploit-db.com/exploits/16516

Vulnerable Software (1)

Type: Configuration

Vendor: *

Product: wmi_administrative_tools

Operating System: * * *

Trait: 
{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:a:microsoft:wmi_administrative_tools:*:*:*:*:*:*:*:*",      "versionEndIncluding": "1.1",      "vulnerable": true    }  ],  "operator": "OR"}

Source: nvd

End of list