CVE-2010-3973

critical Microsoft
CVSS v3 Base Score
9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS Score
82.7%
Exploitation probability in 30 days
Top 1% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
M
Confidentiality
C
Integrity
C
Availability
C
Published: December 23, 2010 (5621 days ago)
Last Modified: April 29, 2026
Vendor: Microsoft
Source: NVD

Description

The WMITools ActiveX control in WBEMSingleView.ocx 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted argument to the AddContextRef method, possibly an untrusted pointer dereference, aka "Microsoft WMITools ActiveX Control Vulnerability."

CWE

CWE-94

Affected Products

microsoft wmi administrative tools

References

🔗 blogs.technet.com 🔗 secunia.com 🔗 www.exploit-db.com 🔗 www.kb.cert.org 🔗 www.securityfocus.com