Lucene search

K
cveIbmCVE-2012-5947
HistoryApr 30, 2013 - 3:33 a.m.

CVE-2012-5947

2013-04-3003:33:42
CWE-119
ibm
web.nvd.nist.gov
108
cve-2012-5947
buffer overflow
vsflex7l
activex control
ibm spss samplepower 3.0
remote code execution
nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.945

Percentile

99.3%

Buffer overflow in the vsflex7l ActiveX control in IBM SPSS SamplePower 3.0 before FP1 allows remote attackers to execute arbitrary code via unspecified vectors.

Affected configurations

Nvd
Node
ibmspss_samplepowerMatch3.0.0.0
VendorProductVersionCPE
ibmspss_samplepower3.0.0.0cpe:2.3:a:ibm:spss_samplepower:3.0.0.0:*:*:*:*:*:*:*

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.945

Percentile

99.3%