CVE-2010-3973

CVE Database · CVE-2010-3973

CVE-2010-3973

· N/AModified

CVSS v3.1

N/A

EPSS

71.73%

Published

Dec 23, 2010

Modified

Apr 28, 2026

Public PoC / Exploit (3)

All weaponized →

Exploit-DBMicrosoft WMI Administration Tools - ActiveX Buffer Overflow (Metasploit)Exploit-DBMicrosoft WMITools - ActiveX Remote Command Execution TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The WMITools ActiveX control in WBEMSingleView.ocx 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted argument to the AddContextRef method, possibly an untrusted pointer dereference, aka "Microsoft WMITools ActiveX Control Vulnerability."

Weaknesses (CWE)

CWE-94

Affected Products (1)

microsoft · wmi_administrative_toolsvulnerable

References (20)

http://blogs.technet.com/b/srd/archive/2011/01/07/assessing-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspx

http://secunia.com/advisories/42693

Vendor Advisory

http://www.exploit-db.com/exploits/15809

Exploit

http://www.kb.cert.org/vuls/id/725596

US Government Resource