Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Andrea Micalizza

Pesquisador deTippingPoint Zero Day Initiative (ZDI)
#27483de 53,638
9.3CVSS total
Vulnerabilidades · 1
PT-2012-2387
9.3
2012-01-18
Ibm · Ibm Spss Samplepower · CVE-2012-0189
**Name of the Vulnerable Software and Affected Versions** IBM SPSS SamplePower version 3.0 **Description** The issue concerns unspecified vulnerabilities in the PrintFile and SaveDoc methods of the VsVIEW6 ActiveX control. These vulnerabilities allow remote attackers to execute arbitrary code via a crafted HTML document. **Recommendations** For IBM SPSS SamplePower version 3.0, consider disabling the VsVIEW6 ActiveX control until a patch is available. As a temporary workaround, restrict access to the SaveDoc and PrintFile methods in the VsVIEW6 ActiveX control to minimize the risk of exploitation.