Lucene search

[email protected]CVE-2012-0188

HistoryJan 18, 2012 - 8:55 p.m.

CVE-2012-0188

2012-01-1820:55:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2012-0188

ibm spss

dimensions

data collection

activex

remote code execution

html document

vulnerability

7.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.225 Low

EPSS

Percentile

96.5%

JSON

Unspecified vulnerability in the SetLicenseInfoEx method in an ActiveX control in mraboutb.dll in IBM SPSS Dimensions 5.5 and SPSS Data Collection 5.6, 6.0, and 6.0.1 allows remote attackers to execute arbitrary code via a crafted HTML document.

CPENameOperatorVersion
ibm:spss_data_collectionibm spss data collectioneq6.0.1
ibm:spss_dimensionsibm spss dimensionseq5.5
ibm:spss_data_collectionibm spss data collectioneq5.6
ibm:spss_data_collectionibm spss data collectioneq6.0

CPE	Name	Operator	Version
ibm:spss_data_collection	ibm spss data collection	eq	6.0.1
ibm:spss_dimensions	ibm spss dimensions	eq	5.5
ibm:spss_data_collection	ibm spss data collection	eq	5.6
ibm:spss_data_collection	ibm spss data collection	eq	6.0

References

osvdb.org/78329

secunia.com/advisories/47565

www-01.ibm.com/support/docview.wss?uid=swg21577956

exchange.xforce.ibmcloud.com/vulnerabilities/72118

7.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.225 Low

EPSS

Percentile

96.5%

JSON

Related for CVE-2012-0188

securityvulns2 zdi1 cvelist1 prion1