CVE-2010-3973

This Metasploit module exploits a buffer overflow in the Microsoft WMI Administration Tools ActiveX control (WEBSingleView.ocx) via a trusted pointer dereference in 'AddContextRef' and 'ReleaseContext' methods. It uses heap spraying and ROP with mscorie.dll to bypass DEP/ASLR, achieving arbitrary code execution.

This exploit leverages a heap spray technique to trigger a use-after-free vulnerability in the Adobe Flash Player ActiveX control (CVE-2010-4588), executing arbitrary shellcode (calc.exe in this case) via a crafted HTML file.

This Metasploit module exploits a buffer overflow in the Microsoft WMI Administration Tools ActiveX control (WEBSingleView.ocx) by treating the 'lCtxHandle' parameter as a trusted pointer, leading to arbitrary code execution. It uses heap spraying and .NET 2.0 'mscorie.dll' to bypass DEP and ASLR.