IBM SPSS SamplePower C1sizer.ocx ActiveX TabCaption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM SPSS SamplePower. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2008-4827

CVE-2008-4827 affects components in ComponentOne SizerOne/Studio for ActiveX, TSC2 Help Desk, and SAP GUI where heap-based buffer overflows exist in AddTab/CTab ActiveX controls (c1sizer.ocx, sizerone.ocx). Attackers can trigger code execution remotely by persuading a user to load specially craft...