CVE-2010-3973

EPSS 71.7%

Vexday Risk Score

60Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

Exploit maturity

Functional exploit

Automatable exploit available (Nuclei/Metasploit).

CVSS —EPSS 71.7%KEV nãoPoC públicaNuclei —Metasploit simPatch referenciado

Lifecycle

21 Dec 2010Metasploit module available

22 Dec 2010Public PoC

23 Dec 2010Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

The WMITools ActiveX control in WBEMSingleView.ocx 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted argument to the AddContextRef method, possibly an untrusted pointer dereference, aka "Microsoft WMITools ActiveX Control Vulnerability."

Affected products

n/a · n/a

public PoCs found — 3

cve_referencewww.exploit-db.com/exploits/15809unverified exploitdbwww.exploit-db.com/exploits/16516unverified exploitdbwww.exploit-db.com/exploits/15809unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://blogs.technet.com/b/srd/archive/2011/01/07/assessing-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspx https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-027 http://secunia.com/advisories/42693 https://exchange.xforce.ibmcloud.com/vulnerabilities/64250 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12475 http://www.exploit-db.com/exploits/15809 http://www.kb.cert.org/vuls/id/725596 http://www.securityfocus.com/bid/45546 http://www.vupen.com/english/advisories/2010/3301 http://www.wooyun.org/bug.php?action=view&id=1006