PT-2012-2386 · Ibm · Ibm Spss Data Collection+1

Published 2012-01-18 · Updated 2017-08-29 · CVE-2012-0188

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM SPSS Dimensions version 5.5 IBM SPSS Data Collection versions 5.6 through 6.0.1

Description The issue allows remote attackers to execute arbitrary code via a crafted HTML document, exploiting an unspecified vulnerability in the SetLicenseInfoEx method in an ActiveX control in mraboutb.dll.

Recommendations For IBM SPSS Dimensions version 5.5, update to a version that fixes the SetLicenseInfoEx method vulnerability in the mraboutb.dll ActiveX control. For IBM SPSS Data Collection versions 5.6 through 6.0.1, update to a version that fixes the SetLicenseInfoEx method vulnerability in the mraboutb.dll ActiveX control.

Fix

Related Identifiers

CVE-2012-0188

ZDI-12-019

Affected Products

Ibm Spss Data Collection

Ibm Spss Dimensions

References · 6

• http://www-01.ibm.com/support/docview.wss?uid=swg21577956 · Vendor Advisory
• http://secunia.com/advisories/47565 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-0188 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-12-019 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/72118 · Note
• http://osvdb.org/78329 · Note