Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveIbmCVE-2012-0189
HistoryJan 18, 2012 - 8:55 p.m.

CVE-2012-0189

2012-01-1820:55:03
ibm
web.nvd.nist.gov
99
cve-2012-0189
printfile
savedoc
vsview6
activex control
ibm spss samplepower 3.0
remote code execution
html document

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.3

Confidence

Low

EPSS

0.88

Percentile

98.7%

JSON

Multiple unspecified vulnerabilities in the (1) PrintFile and (2) SaveDoc methods in the VsVIEW6 ActiveX control in VsVIEW6.ocx in IBM SPSS SamplePower 3.0 allow remote attackers to execute arbitrary code via a crafted HTML document.

Affected configurations

Nvd
Node
ibmspss_samplepowerMatch3.0
VendorProductVersionCPE
ibmspss_samplepower3.0cpe:2.3:a:ibm:spss_samplepower:3.0:*:*:*:*:*:*:*

Related

zdi 2
openvas 3
checkpoint_advisories 1
nvd 1
cvelist 1
prion 1
ibm 1
securityvulns 2
nessus 1
zdi
zdi
IBM SPSS VsVIEW6.ocx ActiveX Control SaveDoc Method Remote Code Execution Vulnerability
2012-02-08 00:00:00
IBM SPSS VsVIEW6.ocx ActiveX Control Multiple Methods Remote Code Execution Vulnerability
2012-01-30 00:00:00
openvas
openvas
IBM SPSS SamplePower 'VsVIEW6' ActiveX Control Multiple Code Execution Vulnerabilities (Windows)
2012-02-01 00:00:00
IBM SPSS SamplePower 'VsVIEW6' ActiveX Control Multiple Code Execution Vulnerabilities - Windows
2012-02-01 00:00:00
Microsoft Windows ActiveX Control Multiple Vulnerabilities (2647518)
2012-03-14 00:00:00
checkpoint_advisories
checkpoint_advisories
IBM SPSS VsVIEW6.ocx ActiveX control Code Execution (CVE-2012-0189)
2012-05-10 00:00:00
nvd
nvd
CVE-2012-0189
2012-01-18 20:55:03
cvelist
cvelist
CVE-2012-0189
2012-01-18 20:00:00
prion
prion
Hardcoded credentials
2012-01-18 20:55:00
ibm
ibm
Security Bulletin: IBM SPSS SamplePower vsview6 ActiveX Control vulnerabilities (CVE-2012-0189)
2022-09-25 19:56:02
securityvulns
securityvulns
ZDI-12-027 : IBM SPSS VsVIEW6.ocx ActiveX Control SaveDoc Method Remote Code Execution Vulnerability
2012-02-13 00:00:00
IBM ActiveX multiple security vulnerabilities
2012-02-13 00:00:00
nessus
nessus
MS 2647518: Update Rollup for ActiveX Kill Bits (2647518)
2012-03-13 00:00:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.3

Confidence

Low

EPSS

0.88

Percentile

98.7%

JSON
Related for CVE-2012-0189
zdi2openvas3checkpoint_advisories1nvd1cvelist1prion1ibm1securityvulns2nessus1