Lucene search

K
cve[email protected]CVE-2010-4588
HistoryDec 23, 2010 - 6:00 p.m.

CVE-2010-4588

2010-12-2318:00:03
CWE-94
web.nvd.nist.gov
23
cve-2010-4588
remote code execution
activex control
microsoft
wmi administrative tools

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.969 High

EPSS

Percentile

99.7%

The WBEMSingleView.ocx ActiveX control 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier allows remote attackers to execute arbitrary code via a crafted argument to the ReleaseContext method, a different vector than CVE-2010-3973, possibly an untrusted pointer dereference.

Affected configurations

NVD
Node
microsoftwmi_administrative_toolsRange1.1

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.969 High

EPSS

Percentile

99.7%