PT-2010-5555 · Microsoft · Wmi Administrative Tools

Publicado 2010-12-23 · Atualizado 2011-01-19 · CVE-2010-4588

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft WMI Administrative Tools versions 1.1 and earlier

Description The issue allows remote attackers to execute arbitrary code via a crafted argument to the ReleaseContext method. This could be related to an untrusted pointer dereference.

Recommendations For Microsoft WMI Administrative Tools versions 1.1 and earlier, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2010-4588

Produtos afetados

Wmi Administrative Tools

Referências · 7

• 🔥 https://exploit-db.com/exploits/15809 · Exploit
• 🔥 http://wooyun.org/bug.php?action=view&id=1006 · Exploit
• http://blogs.technet.com/b/srd/archive/2011/01/07/assessing-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspx · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-4588 · Nota de Segurança
• http://twitter.com/carsteneiram/status/17526155733110784 · Nota
• http://kb.cert.org/vuls/id/725596 · Nota
• http://secunia.com/advisories/42693 · Aviso do Fabricante