CVE-2010-3973

CVE-2010-3973 is a critical remote code execution vulnerability affecting the WMITools ActiveX control in Microsoft WMI Administrative Tools 1.1 and earlier on Windows XP SP2 and SP3. Attackers can exploit this by crafting an argument to the AddContextRef method, potentially leading to an untrusted pointer dereference. With a CVSS score of 9.3, this vulnerability is highly severe, allowing complete compromise of confidentiality, integrity, and availability with medium attack complexity and no authentication required. While not on the KEV catalog, exploit code is publicly available in Metasploit and ExploitDB, indicating a high potential for exploitation, though it has received minimal community discussion or media coverage.