Buffer overflow

Buffer overflow in the vsflex7l ActiveX control in IBM SPSS SamplePower 3.0 before FP1 allows remote attackers to execute arbitrary code via unspecified vectors...

DSquare Exploit Pack: D2SEC_C1SIZER

Name| d2secc1sizer ---|--- CVE| CVE-2012-5946 Exploit Pack| D2ExploitPack Description| IBM SPSS SamplePower c1sizer ActiveX Buffer Overflow Vulnerability Notes|...

CVE-2012-5945

Multiple buffer overflows in the Vsflex8l ActiveX control in IBM SPSS SamplePower 3.0 before FP1 allow remote attackers to execute arbitrary code via a long 1 ComboList or 2 ColComboList property value...

CVE-2012-5946

Buffer overflow in the c1sizer ActiveX control in C1sizer.ocx in IBM SPSS SamplePower 3.0 before FP1 allows remote attackers to execute arbitrary code via a long TabCaption string...

CVE-2012-5945

The CVE-2012-5945 issue affects IBM SPSS SamplePower for Windows (Version 3.0) through the Vsflex8l ActiveX control. The root cause is a buffer overflow in the Vsflex8l ActiveX control triggered when a long string is assigned to the ComboList or ColComboList properties, enabling remote code execu...

CVE-2012-5947

IBM SPSS SamplePower 3.0 contains a vsflex7l ActiveX control vulnerability (CVE-2012-5947) that enables remote code execution when the control is invoked by Internet Explorer. The issue arises from insufficient input validation in the ActiveX component, allowing memory corruption and arbitrary co...

CVE-2012-5946

CVE-2012-5946 affects IBM SPSS SamplePower 3.0 (c1sizer.ocx) where the C1Tab ActiveX control triggers a heap/buffer overflow when handling the TabCaption string, allowing remote code execution. The IBM advisory details that the overflow occurs due to unsafe concatenation (lstrcatA) in TabCaption ...

CVE-2012-5947

Buffer overflow in the vsflex7l ActiveX control in IBM SPSS SamplePower 3.0 before FP1 allows remote attackers to execute arbitrary code via unspecified vectors...

PT-2013-1857

Name of the Vulnerable Software and Affected Versions IBM SPSS SamplePower version 3.0 before FP1 Description The issue concerns buffer overflows in the Vsflex8l ActiveX control. Remote attackers can execute arbitrary code by providing a long value for either the ComboList or ColComboList propert...

PT-2013-1859

Name of the Vulnerable Software and Affected Versions IBM SPSS SamplePower version 3.0 before FP1 Description The issue is related to a buffer overflow in the vsflex7l ActiveX control, which allows remote attackers to execute arbitrary code. Recommendations For IBM SPSS SamplePower version 3.0,...

CVE-2012-5945: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in the Vsflex8l ActiveX control in IBM SPSS SamplePower 3.0 before FP1 allow remote attackers to execute arbitrary code via a long 1 ComboList or 2 ColComboList property value...

CVE-2012-5947: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the vsflex7l ActiveX control in IBM SPSS SamplePower 3.0 before FP1 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2012-5946: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the c1sizer ActiveX control in C1sizer.ocx in IBM SPSS SamplePower 3.0 before FP1 allows remote attackers to execute arbitrary code via a long TabCaption string...

PT-2013-1858

Name of the Vulnerable Software and Affected Versions IBM SPSS SamplePower version 3.0 Description The issue is related to a buffer overflow in the c1sizer ActiveX control, which can be exploited to execute arbitrary code. This is achieved by providing a long TabCaption string. Recommendations Fo...

CVE-2013-0593

Unspecified vulnerability in the olch2x32 ActiveX control in IBM SPSS SamplePower 3.0 before 3.0-IM-S3SAMPC-WIN32-FP001 allows remote attackers to execute arbitrary code via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the olch2x32 ActiveX control in IBM SPSS SamplePower 3.0 before 3.0-IM-S3SAMPC-WIN32-FP001 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2013-0593

Unspecified vulnerability in the olch2x32 ActiveX control in IBM SPSS SamplePower 3.0 before 3.0-IM-S3SAMPC-WIN32-FP001 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2013-0593

IBM SPSS SamplePower 3.0 for Windows contains a vulnerability in the olch2x32 ActiveX control (olch2x32.ocx) that allows remote code execution when the control is invoked from Internet Explorer. The IBM Security Bulletin notes this affects SamplePower 3.0 with FP001; remediation is to apply the F...

PT-2013-2448

Name of the Vulnerable Software and Affected Versions IBM SPSS SamplePower version 3.0 before 3.0-IM-S3SAMPC-WIN32-FP001 IBM SPSS Chart2D olch2x32.ocx affected versions not specified Description The issue allows remote attackers to execute arbitrary code via unknown vectors. This is related to an...

CVE-2013-0593: Undefined Security Weakness

Unspecified vulnerability in the olch2x32 ActiveX control in IBM SPSS SamplePower 3.0 before 3.0-IM-S3SAMPC-WIN32-FP001 allows remote attackers to execute arbitrary code via unknown vectors...