CVE-2012-0188 Unspecified vulnerability in the SetLicenseInfoEx method in an ActiveX control in mraboutb.dll in IBM SPSS Dimensions 5.5 and SPSS Data Collection 5.6, 6.0, and 6.0.1 allows remote attackers to execut...
HighCVSS 9.3
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in the SetLicenseInfoEx method in an ActiveX control in mraboutb.dll in IBM SPSS Dimensions 5.5 and SPSS Data Collection 5.6, 6.0, and 6.0.1 allows remote attackers to execute arbitrary code via a crafted HTML document.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm spss data collection | = 5.6 | No fix listed |
| ibm spss data collection | = 6.0 | No fix listed |
| ibm spss data collection | = 6.0.1 | No fix listed |
| ibm spss dimensions | = 5.5 | No fix listed |
References
- 78329 vdb-entry
- 47565 third-party-advisory vendor-advisory
- www-01.ibm.com vendor-advisory
- spss-mraboutb-activex-code-execution(72118) vdb-entry