PT-2014-3928

Name of the Vulnerable Software and Affected Versions IBM SPSS SamplePower version 3.0.1 Description The issue is related to a buffer overflow in the vsflex8l ActiveX control. This can be exploited by remote attackers to execute arbitrary code via a crafted ComboList property value. Recommendatio...

CVE-2014-0895: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the vsflex8l ActiveX control in IBM SPSS SamplePower 3.0.1 before FP1 3.0.1-IM-S3SAMPC-WIN32-FP001-IF02 allows remote attackers to execute arbitrary code via a crafted ComboList property value...

CVE-2013-6724

Unspecified vulnerability in the vsflex8l ActiveX control in IBM SPSS SamplePower 3.0.1 before FP1 IF1 allows remote attackers to execute arbitrary code via a crafted ComboList property value...

Code injection

Unspecified vulnerability in the vsflex8l ActiveX control in IBM SPSS SamplePower 3.0.1 before FP1 IF1 allows remote attackers to execute arbitrary code via a crafted ComboList property value...

PT-2014-3175

Name of the Vulnerable Software and Affected Versions IBM SPSS SamplePower version 3.0.1 Description The issue allows remote attackers to execute arbitrary code via a crafted ComboList property value in the vsflex8l ActiveX control. Recommendations For version 3.0.1, apply the fix provided in FP1...

CVE-2013-6724: Undefined Security Weakness

Unspecified vulnerability in the vsflex8l ActiveX control in IBM SPSS SamplePower 3.0.1 before FP1 IF1 allows remote attackers to execute arbitrary code via a crafted ComboList property value...

IBM SPSS SamplePower Vsflex8l.ocx ActiveX ComboList/ColComboList Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM SPSS SamplePower. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

PT-2013-1857

Name of the Vulnerable Software and Affected Versions IBM SPSS SamplePower version 3.0 before FP1 Description The issue concerns buffer overflows in the Vsflex8l ActiveX control. Remote attackers can execute arbitrary code by providing a long value for either the ComboList or ColComboList propert...

CVE-2012-5945: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in the Vsflex8l ActiveX control in IBM SPSS SamplePower 3.0 before FP1 allow remote attackers to execute arbitrary code via a long 1 ComboList or 2 ColComboList property value...