PT-2012-2387 · Ibm · Ibm Spss Samplepower

Andrea Micalizza + 1 · Publicado 2012-01-18 · Atualizado 2017-08-29 · CVE-2012-0189

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM SPSS SamplePower version 3.0

Description The issue concerns unspecified vulnerabilities in the PrintFile and SaveDoc methods of the VsVIEW6 ActiveX control. These vulnerabilities allow remote attackers to execute arbitrary code via a crafted HTML document.

Recommendations For IBM SPSS SamplePower version 3.0, consider disabling the VsVIEW6 ActiveX control until a patch is available. As a temporary workaround, restrict access to the SaveDoc and PrintFile methods in the VsVIEW6 ActiveX control to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2012-0189

ZDI-12-020

ZDI-12-027

Produtos afetados

Ibm Spss Samplepower

Referências · 6

• https://zerodayinitiative.com/advisories/ZDI-12-020 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2012-0189 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/72119 · Nota
• http://secunia.com/advisories/47605 · Aviso do Fabricante
• https://zerodayinitiative.com/advisories/ZDI-12-027 · Nota de Segurança
• http://ibm.com/support/docview.wss?uid=swg21577951 · Aviso do Fabricante