Lucene search

K
cveIbmCVE-2012-0188
HistoryJan 18, 2012 - 8:55 p.m.

CVE-2012-0188

2012-01-1820:55:02
ibm
web.nvd.nist.gov
35
cve-2012-0188
ibm spss
dimensions
data collection
activex
remote code execution
html document
vulnerability

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.4

Confidence

Low

EPSS

0.225

Percentile

96.5%

Unspecified vulnerability in the SetLicenseInfoEx method in an ActiveX control in mraboutb.dll in IBM SPSS Dimensions 5.5 and SPSS Data Collection 5.6, 6.0, and 6.0.1 allows remote attackers to execute arbitrary code via a crafted HTML document.

Affected configurations

Nvd
Node
ibmspss_data_collectionMatch5.6
OR
ibmspss_data_collectionMatch6.0
OR
ibmspss_data_collectionMatch6.0.1
OR
ibmspss_dimensionsMatch5.5
VendorProductVersionCPE
ibmspss_data_collection5.6cpe:2.3:a:ibm:spss_data_collection:5.6:*:*:*:*:*:*:*
ibmspss_data_collection6.0cpe:2.3:a:ibm:spss_data_collection:6.0:*:*:*:*:*:*:*
ibmspss_data_collection6.0.1cpe:2.3:a:ibm:spss_data_collection:6.0.1:*:*:*:*:*:*:*
ibmspss_dimensions5.5cpe:2.3:a:ibm:spss_dimensions:5.5:*:*:*:*:*:*:*

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.4

Confidence

Low

EPSS

0.225

Percentile

96.5%

Related for CVE-2012-0188