CVE-2010-4588

WMI Administrative Tools < 1.1 - Remote Code Execution via WBEMSingleView.ocx ReleaseContext Method

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2010-4588. PoCs published by WooYun.

AI-analyzed exploit summary This exploit leverages a heap spray technique to trigger a use-after-free vulnerability in the Adobe Flash Player ActiveX control (CVE-2010-4588), executing arbitrary shellcode (calc.exe in this case) via a crafted HTML file.

Description

The WBEMSingleView.ocx ActiveX control 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier allows remote attackers to execute arbitrary code via a crafted argument to the ReleaseContext method, a different vector than CVE-2010-3973, possibly an untrusted pointer dereference.

Exploits (1)

exploitdb WORKING POC VERIFIED

by WooYun · htmlremotewindows

https://www.exploit-db.com/exploits/15809

View Code ZIP pw:eip

This exploit leverages a heap spray technique to trigger a use-after-free vulnerability in the Adobe Flash Player ActiveX control (CVE-2010-4588), executing arbitrary shellcode (calc.exe in this case) via a crafted HTML file.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: Adobe Flash Player ActiveX (likely versions prior to 10.1.102.64)

No auth needed

Prerequisites: Victim must visit a malicious webpage with the exploit · Adobe Flash Player ActiveX control must be installed and vulnerable

MITRE ATT&CK