CVE-2012-0189

Published Jan 18, 2012

Last updated 7 years ago

Overview

Description: Multiple unspecified vulnerabilities in the (1) PrintFile and (2) SaveDoc methods in the VsVIEW6 ActiveX control in VsVIEW6.ocx in IBM SPSS SamplePower 3.0 allow remote attackers to execute arbitrary code via a crafted HTML document.
Source: psirt@us.ibm.com
NVD status: Modified

Risk scores

CVSS 2.0

Type: Primary
Base score: 9.3
Impact score: 10
Exploitability score: 8.6
Vector string: AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

nvd@nist.gov: NVD-CWE-noinfo

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:ibm:spss_samplepower:3.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "82B0715E-BC51-416C-9819-885FF6460132"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References