PT-2013-2448 · Ibm · Olch2X32 Activex Control+1

Rgod · Publicado 2013-04-27 · Atualizado 2017-08-29 · CVE-2013-0593

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM SPSS SamplePower version 3.0 before 3.0-IM-S3SAMPC-WIN32-FP001 IBM SPSS Chart2D olch2x32.ocx (affected versions not specified)

Description The issue allows remote attackers to execute arbitrary code via unknown vectors. This is related to an unspecified vulnerability in the olch2x32 ActiveX control.

Recommendations For IBM SPSS SamplePower version 3.0, update to version 3.0-IM-S3SAMPC-WIN32-FP001 or later. As a temporary workaround, consider disabling the olch2x32 ActiveX control until a patch is available.

Correção

Identificadores relacionados

CVE-2013-0593

ZDI-13-092

Produtos afetados

Ibm Spss Samplepower

Olch2X32 Activex Control

Referências · 4

• https://zerodayinitiative.com/advisories/ZDI-13-092 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/83382 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-0593 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg21635503 · Nota