CVE-2010-3973

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 71.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2010-12-23 · updated 2026-06-16
Weakness: CWE-94

Description

The WMITools ActiveX control in WBEMSingleView.ocx 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted argument to the AddContextRef method, possibly an untrusted pointer dereference, aka "Microsoft WMITools ActiveX Control Vulnerability."

Affected products

Microsoft Wmi Administrative Tools: through 1.1

References

http://blogs.technet.com/b/srd/archive/2011/01/07/assessing-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspx
http://secunia.com/advisories/42693
http://www.exploit-db.com/exploits/15809
http://www.kb.cert.org/vuls/id/725596
http://www.securityfocus.com/bid/45546
http://www.vupen.com/english/advisories/2010/3301
http://www.wooyun.org/bug.php?action=view&id=1006
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-027
https://exchange.xforce.ibmcloud.com/vulnerabilities/64250
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12475
http://blogs.technet.com/b/srd/archive/2011/01/07/assessing-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspx
http://secunia.com/advisories/42693

Get alerted when CVE-2010-3973 or the next vulnerability affects your stack