Security Bulletin: IBM SPSS SamplePower c1sizer ActiveX control vulnerability (CVE-2012-5946)

Abstract There is a security vulnerability with the c1sizer ActiveX control shipped by IBM SPSS SamplePower Version 3. The vulnerability allow remote attackers to execute arbitrary code on installations of SamplePower when the control is invoked as ActiveX by Microsoft Internet Explorer. Content...

IBM SPSS SamplePower C1Tab ActiveX Heap Overflow

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

IBM SPSS SamplePower c1sizer ActiveX Control Buffer Overflow (CVE-2012-5946)

A heap-based buffer overflow vulnerability exists in IBM SPSS SamplePower...

CVE-2012-5946

creationtimestamp| type| source ---|---|--- 2013-05-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/25814 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ibmspssc1sizer.rb 2025-02-06 03:13:40+00:00| see...

IBM SPSS SamplePower 3.0 < 3.0 FP 1 Multiple ActiveX Controls Arbitrary Code Execution

The remote install of IBM SPSS SamplePower has a vulnerable version of one or more ActiveX controls installed. 'Vsflex8l.ocx', 'c1sizer.ocx', 'vsflex7l .ocx', and 'olch2x32.ocx' ActiveX controls have unspecified arbitrary code execution vulnerabilities, which can be exploited by tricking a user...

DSquare Exploit Pack: D2SEC_C1SIZER

Name| d2secc1sizer ---|--- CVE| CVE-2012-5946 Exploit Pack| D2ExploitPack Description| IBM SPSS SamplePower c1sizer ActiveX Buffer Overflow Vulnerability Notes|...

CVE-2012-5946

CVE-2012-5946 affects IBM SPSS SamplePower 3.0 (c1sizer.ocx) where the C1Tab ActiveX control triggers a heap/buffer overflow when handling the TabCaption string, allowing remote code execution. The IBM advisory details that the overflow occurs due to unsafe concatenation (lstrcatA) in TabCaption ...