IBM SPSS SamplePower C1sizer.ocx ActiveX TabCaption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM SPSS SamplePower. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2012-5946: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the c1sizer ActiveX control in C1sizer.ocx in IBM SPSS SamplePower 3.0 before FP1 allows remote attackers to execute arbitrary code via a long TabCaption string...

CVE-2008-4827

CVE-2008-4827 affects components in ComponentOne SizerOne/Studio for ActiveX, TSC2 Help Desk, and SAP GUI where heap-based buffer overflows exist in AddTab/CTab ActiveX controls (c1sizer.ocx, sizerone.ocx). Attackers can trigger code execution remotely by persuading a user to load specially craft...

CVE-2008-4827: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple heap-based buffer overflows in the AddTab method in the 1 Tab and 2 CTab ActiveX controls in c1sizer.ocx and the 3 TabOne ActiveX control in sizerone.ocx in ComponentOne SizerOne 8.0.20081.140, as used in ComponentOne Studio for ActiveX 2008, TSC2 Help Desk 4.1.8, SAP GUI 6.40 Patch 29 a...