PT-2013-2448 · Ibm · Olch2X32 Activex Control+1

Rgod · Published 2013-04-27 · Updated 2017-08-29 · CVE-2013-0593

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM SPSS SamplePower version 3.0 before 3.0-IM-S3SAMPC-WIN32-FP001 IBM SPSS Chart2D olch2x32.ocx (affected versions not specified)

Description The issue allows remote attackers to execute arbitrary code via unknown vectors. This is related to an unspecified vulnerability in the olch2x32 ActiveX control.

Recommendations For IBM SPSS SamplePower version 3.0, update to version 3.0-IM-S3SAMPC-WIN32-FP001 or later. As a temporary workaround, consider disabling the olch2x32 ActiveX control until a patch is available.

Fix

Related Identifiers

CVE-2013-0593

ZDI-13-092

Affected Products

Ibm Spss Samplepower

Olch2X32 Activex Control

References · 4

• https://zerodayinitiative.com/advisories/ZDI-13-092 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2013-0593 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/83382 · Note
• http://www-01.ibm.com/support/docview.wss?uid=swg21635503 · Note