CVE-2010-4588

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 32.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2010-12-23 · updated 2026-06-16
Weakness: CWE-94

Description

The WBEMSingleView.ocx ActiveX control 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier allows remote attackers to execute arbitrary code via a crafted argument to the ReleaseContext method, a different vector than CVE-2010-3973, possibly an untrusted pointer dereference.

Affected products

Microsoft Wmi Administrative Tools: through 1.1

References

http://blogs.technet.com/b/srd/archive/2011/01/07/assessing-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspx
http://secunia.com/advisories/42693
http://twitter.com/carsteneiram/status/17526155733110784
http://www.kb.cert.org/vuls/id/725596
http://www.wooyun.org/bug.php?action=view&id=1006
http://blogs.technet.com/b/srd/archive/2011/01/07/assessing-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspx
http://secunia.com/advisories/42693
http://twitter.com/carsteneiram/status/17526155733110784
http://www.kb.cert.org/vuls/id/725596
http://www.wooyun.org/bug.php?action=view&id=1006

Get alerted when CVE-2010-4588 or the next vulnerability affects your stack