CVE-2010-3973

N/A Unknown
Published: December 23, 2010 Modified: April 29, 2026
View on NVD

Description

The WMITools ActiveX control in WBEMSingleView.ocx 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted argument to the AddContextRef method, possibly an untrusted pointer dereference, aka "Microsoft WMITools ActiveX Control Vulnerability."

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://blogs.technet.com/b/srd/archive/2011/01/07/assessing-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspx
Source: secure@microsoft.com
http://secunia.com/advisories/42693
Source: secure@microsoft.com
Vendor Advisory
http://www.exploit-db.com/exploits/15809
Source: secure@microsoft.com
Exploit
http://www.kb.cert.org/vuls/id/725596
Source: secure@microsoft.com
US Government Resource
http://www.securityfocus.com/bid/45546
Source: secure@microsoft.com
Exploit
http://www.vupen.com/english/advisories/2010/3301
Source: secure@microsoft.com
Vendor Advisory
http://www.wooyun.org/bug.php?action=view&id=1006
Source: secure@microsoft.com
Exploit
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-027
Source: secure@microsoft.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/64250
Source: secure@microsoft.com
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12475
Source: secure@microsoft.com
http://blogs.technet.com/b/srd/archive/2011/01/07/assessing-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspx
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/42693
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://www.exploit-db.com/exploits/15809
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
http://www.kb.cert.org/vuls/id/725596
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
http://www.securityfocus.com/bid/45546
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
http://www.vupen.com/english/advisories/2010/3301
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://www.wooyun.org/bug.php?action=view&id=1006
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-027
Source: af854a3a-2127-422b-91ae-364da2661108
https://exchange.xforce.ibmcloud.com/vulnerabilities/64250
Source: af854a3a-2127-422b-91ae-364da2661108
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12475
Source: af854a3a-2127-422b-91ae-364da2661108

20 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
71.7%
99th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-94

Affected Vendors

microsoft

Related CVEs

CVE-2026-57700 10.0
CVE-2026-56790 7.3
CVE-2026-56789 6.5
CVE-2026-56788 4.4
CVE-2026-56787 6.5