CVE-2012-5945
IBM SPSS SamplePower 3.0 - Remote Code Execution via Vsflex8l ActiveX Control Buffer Overflow
Title source: llmDescription
Multiple buffer overflows in the Vsflex8l ActiveX control in IBM SPSS SamplePower 3.0 before FP1 allow remote attackers to execute arbitrary code via a long (1) ComboList or (2) ColComboList property value.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/80561
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21635515
Scores
EPSS
0.0350
EPSS Percentile
87.8%
Details
CWE
CWE-119
Status
published
Products (1)
ibm/spss_samplepower
3.0.0.0
Published
Apr 30, 2013
Tracked Since
Feb 18, 2026