CVE-2010-3973

The WMITools ActiveX control in WBEMSingleView.ocx 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted argument to the AddContextRef method, possibly an untrusted pointer dereference, aka "Microsoft WMITools ActiveX Control Vulnerability."

CVSS v2.0 9.3 HIGH

9.3^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 8.6 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://secunia.com/advisories/42693	Vendor Advisory
http://www.kb.cert.org/vuls/id/725596	US Government Resource
http://www.wooyun.org/bug.php?action=view&id=1006	Exploit
http://www.securityfocus.com/bid/45546	Exploit
http://www.exploit-db.com/exploits/15809	Exploit
http://www.vupen.com/english/advisories/2010/3301	Vendor Advisory
http://blogs.technet.com/b/srd/archive/2011/01/07/assessing-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspx
https://exchange.xforce.ibmcloud.com/vulnerabilities/64250
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12475
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-027

Advertisement

Configurations

Configuration 1 (hide)

cpe:2.3:a:microsoft:wmi_administrative_tools:*:*:*:*:*:*:*:*

Information

Published : 2010-12-23 10:00

Updated : 2018-10-12 14:59

NVD link : CVE-2010-3973

Mitre link : CVE-2010-3973

JSON object : View

CWE

CWE-94

Improper Control of Generation of Code ('Code Injection')

Advertisement

Products Affected

microsoft

wmi_administrative_tools

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://secunia.com/advisories/42693", "name": "42693", "tags": ["Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://www.kb.cert.org/vuls/id/725596", "name": "VU#725596", "tags": ["US Government Resource"], "refsource": "CERT-VN"}, {"url": "http://www.wooyun.org/bug.php?action=view&id=1006", "name": "http://www.wooyun.org/bug.php?action=view&id=1006", "tags": ["Exploit"], "refsource": "MISC"}, {"url": "http://www.securityfocus.com/bid/45546", "name": "45546", "tags": ["Exploit"], "refsource": "BID"}, {"url": "http://www.exploit-db.com/exploits/15809", "name": "15809", "tags": ["Exploit"], "refsource": "EXPLOIT-DB"}, {"url": "http://www.vupen.com/english/advisories/2010/3301", "name": "ADV-2010-3301", "tags": ["Vendor Advisory"], "refsource": "VUPEN"}, {"url": "http://blogs.technet.com/b/srd/archive/2011/01/07/assessing-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspx", "name": "http://blogs.technet.com/b/srd/archive/2011/01/07/assessing-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspx", "tags": [], "refsource": "MISC"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64250", "name": "ms-wmi-wbemsingleview-ce(64250)", "tags": [], "refsource": "XF"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12475", "name": "oval:org.mitre.oval:def:12475", "tags": [], "refsource": "OVAL"}, {"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-027", "name": "MS11-027", "tags": [], "refsource": "MS"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "The WMITools ActiveX control in WBEMSingleView.ocx 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted argument to the AddContextRef method, possibly an untrusted pointer dereference, aka \"Microsoft WMITools ActiveX Control Vulnerability.\""}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-94"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2010-3973", "ASSIGNER": "secure@microsoft.com"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 9.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "severity": "HIGH", "impactScore": 10.0, "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}}, "publishedDate": "2010-12-23T18:00Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:microsoft:wmi_administrative_tools:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "1.1"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2018-10-12T21:59Z"}