CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
Percentile
99.4%
There is a security vulnerability with the Vsflex8l ActiveX control shipped by IBM SPSS SamplePower Version 3. The vulnerability allows remote attackers to execute arbitrary code on installations of SamplePower when the control is invoked as ActiveX by Microsoft Internet Explorer.
VULNERABILITY DETAILS:
CVE IDs: CVE-2012-5945
DESCRIPTION: It is possible for an attacker to compromise the Vsflex8l ActiveX control used within IBM SPSS SamplePower to remotely execute arbitrary code by instantiating this control from Microsoft Internet Explorer. For a remote attacker to exploit these vulnerabilities in SamplePower releases, the following must be accomplished:
1. The user must have IBM SPSS SamplePower installed on the machine.
2. Attacker needs to create malicious code that would exploit the ActiveX control. Buffer overflow occurs when a special malformed string is assigned to the βComboListβ(or βColComboListβ) property. The code starting at 10033FD6 looks for a β#β to terminate the string. It then copies the string into a global buffer in the data section with a static size of 0x64.
3. It is safe for scripting.
As of April 24, 2013, IBM has not received any reports of customer issues related to these security vulnerabilities.
These vulnerabilities were reported to IBM by HPβs Zero Day Initiative (ZDI) and discovered by a third-party researcher, Alexander Gavrun, working with ZDI.
CVSS:
Using the Common Vulnerability Scoring System (CVSS) v2, the security ratings for these issues are:
CVSS Base Score: 9.3
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/80561> for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:M/Au:N/C:C/I:C/A:C)
AFFECTED PLATFORMS:
IBM SPSS SamplePower for Windows V3.0
REMEDIATION:
The recommended solution is to download and install the IBM SamplePower 3.0 FP1.
Fix* | VRMF | APAR | How to acquire fix |
---|---|---|---|
3.0-IM-S3SAMPC-WIN32-FP001 | 3.0.0.1 | N/A | Download 3.0-IM-S3SAMPC-WIN32-FP001 |
Fix Pack:
In order to remove the old version of the Control, the user should un-install the current release, download the available Sample Power 3.0.1 Fix Pack 1, install and re-license with your current Authorization Code.
1. Download the Fix Pack from IBM Fix Central (3.0-IM-S3SAMPC-WIN32-FP001).
2. Install the IBM SamplePower 3.0. FP1 on top of your existing installation.
3. Reboot if necessary.
Mitigation(s):
None known apply the workaround.
REFERENCES:
Note: According to the Forum of Incident Response and Security Teams (FIRST), the Common Vulnerability Scoring System (CVSS) is an βindustry open standard designed to convey vulnerability severity and help to determine urgency and priority of response.β IBM PROVIDES THE CVSS SCORES βAS ISβ WITHOUT WARRANTY OF ANY KIND, INCLUDING THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. CUSTOMERS ARE RESPONSIBLE FOR ASSESSING THE IMPACT OF ANY ACTUAL OR POTENTIAL SECURITY VULNERABILITY.
Need more help? Our SamplePower forum is Live!
[{βProductβ:{βcodeβ:βSS6A5Aβ,βlabelβ:βIBM SPSS SamplePowerβ},βBusiness Unitβ:{βcodeβ:βBU059β,βlabelβ:βIBM Software w/o TPSβ},βComponentβ:βββ,βPlatformβ:[{βcodeβ:βPF033β,βlabelβ:βWindowsβ}],βVersionβ:β3.0β,βEditionβ:ββ,βLine of Businessβ:{βcodeβ:βLOB10β,βlabelβ:βData and AIβ}}]
Vendor | Product | Version | CPE |
---|---|---|---|
ibm | spss_samplepower | 3.0 | cpe:2.3:a:ibm:spss_samplepower:3.0:*:*:*:*:*:*:* |