PT-2012-2386 · Ibm · Ibm Spss Data Collection+1

Publicado 2012-01-18 · Atualizado 2017-08-29 · CVE-2012-0188

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM SPSS Dimensions version 5.5 IBM SPSS Data Collection versions 5.6 through 6.0.1

Description The issue allows remote attackers to execute arbitrary code via a crafted HTML document, exploiting an unspecified vulnerability in the SetLicenseInfoEx method in an ActiveX control in mraboutb.dll.

Recommendations For IBM SPSS Dimensions version 5.5, update to a version that fixes the SetLicenseInfoEx method vulnerability in the mraboutb.dll ActiveX control. For IBM SPSS Data Collection versions 5.6 through 6.0.1, update to a version that fixes the SetLicenseInfoEx method vulnerability in the mraboutb.dll ActiveX control.

Correção

Identificadores relacionados

CVE-2012-0188

ZDI-12-019

Produtos afetados

Ibm Spss Data Collection

Ibm Spss Dimensions

Referências · 6

• http://www-01.ibm.com/support/docview.wss?uid=swg21577956 · Aviso do Fabricante
• http://secunia.com/advisories/47565 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-0188 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/72118 · Nota
• http://osvdb.org/78329 · Nota
• https://zerodayinitiative.com/advisories/ZDI-12-019 · Nota de Segurança