Lucene search

K
nvd[email protected]NVD:CVE-2014-0895
HistoryMar 16, 2014 - 2:06 p.m.

CVE-2014-0895

2014-03-1614:06:45
CWE-119
web.nvd.nist.gov
1

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

Low

EPSS

0.834

Percentile

98.5%

Buffer overflow in the vsflex8l ActiveX control in IBM SPSS SamplePower 3.0.1 before FP1 3.0.1-IM-S3SAMPC-WIN32-FP001-IF02 allows remote attackers to execute arbitrary code via a crafted ComboList property value.

Affected configurations

Nvd
Node
ibmspss_samplepowerMatch3.0.1.0
VendorProductVersionCPE
ibmspss_samplepower3.0.1.0cpe:2.3:a:ibm:spss_samplepower:3.0.1.0:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

Low

EPSS

0.834

Percentile

98.5%