Immunity, Inc.
Name wp_wmitools
CVE 2010-3973
Exploit Pack White_Phosphorus
DescriptionWMITools ActiveX Control Exploit
NotesVENDOR: Microsoft
Notes:
This is a client-side exploit - so use it via clientd or httpserver.
If you choose to host the exploit file on an independandant webserver, then you must include the created .dll file as well.


VersionsAffected: Windows XP/Vista/7, IE Versions 6/7/8
Repeatability: Unlimited
References: http://wooyun.org/bug.php?action=view&id=1006
http://www.microsoft.com/downloads/en/details.aspx?FamilyID=6430f853-1120-48db-8cc5-f2abdc3ed314
http://www.cvedetails.com/cve/CVE-2010-3973/
CVE Url: http://cve.mitre.org/cgi-bin/cvename.cgi?name=2010-3973
Date public: 2010-12-22
CVE: 2010-3973
CVSS: 9.3

Learn more about the CANVAS Exploit Pack here: White_Phosphorus