CVE-2012-5946 Buffer overflow in the c1sizer ActiveX control in C1sizer.ocx in IBM SPSS SamplePower 3.0 before FP1 allows remote attackers to execute arbitrary code via a long TabCaption string.
HighCVSS 9.3
EPSS 33.8%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in the c1sizer ActiveX control in C1sizer.ocx in IBM SPSS SamplePower 3.0 before FP1 allows remote attackers to execute arbitrary code via a long TabCaption string.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm spss samplepower | = 3.0.0.0 | No fix listed |
References
- www-01.ibm.com vendor-advisory
- spss-samplepower-c1sizer-bo(80562) vdb-entry