Two vulnerabilities have been discovered in Microsoft WMI Administrative Tools, which can be exploited by malicious people to compromise a user's system.

The vulnerabilities are caused due to the "AddContextRef()" and "ReleaseContext()" methods in the WMI Object Viewer Control (WBEM.SingleViewCtrl.1) using a value passed in the "lCtxHandle" parameter as an object pointer.

Successful exploitation allows execution of arbitrary code.

The vulnerabilities are confirmed in version 1.1 (WBEMSingleView.ocx 1.50.1131.0). Other versions may also be affected.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
WooYun

Additional information about vulnerability in the "ReleaseContext()" method provided by Secunia Research.

Changelog
Further details available in Customer Area

Original Advisory
WooYun:
http://www.wooyun.org/bugs/wooyun-2010-01006

MS11-027 (KB2508272):
http://www.microsoft.com/technet/security/Bulletin/MS11-027.mspx

Other references
Further details available in Customer Area

Technical Analysis
Further details available in Customer Area

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available in Customer Area