Buffer overflow in Ibm Spss_samplepower

CVE-2012-5945

Multiple buffer overflows in the Vsflex8l ActiveX control in IBM SPSS SamplePower 3.0 before FP1 allow remote attackers to execute arbitrary code via a long (1) ComboList or (2) ColComboList property value.

Vulnerability class: Buffer Overflow

EPSS: 0.190 (95.5th percentile) — read the EPSS interpretation.

Affected products

Ibm Spss_samplepower — versions 3.0.0.0
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

spss-samplepower-vsflex81-bo(80561) (vdb-entry, x_refsource_XF)
psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)