Vulnerability Description
Buffer overflow in the vsflex7l ActiveX control in IBM SPSS SamplePower 3.0 before FP1 allows remote attackers to execute arbitrary code via unspecified vectors.
CVSS Score
9.3
HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Spss Samplepower | 3.0.0.0 |
Related Weaknesses (CWE)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21635511Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80563
- http://www-01.ibm.com/support/docview.wss?uid=swg21635511Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80563
FAQ
What is CVE-2012-5947?
CVE-2012-5947 is a vulnerability with a CVSS score of 9.3 (HIGH). Buffer overflow in the vsflex7l ActiveX control in IBM SPSS SamplePower 3.0 before FP1 allows remote attackers to execute arbitrary code via unspecified vectors.
How severe is CVE-2012-5947?
CVE-2012-5947 has been rated HIGH with a CVSS base score of 9.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2012-5947?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Spss Samplepower.