critical9.3Public exploit code
CVE-2012-5946
Buffer overflow in the c1sizer ActiveX control in C1sizer.ocx in IBM SPSS SamplePower 3.0 before FP1 allows remote attackers to execute arbitrary code via a lo…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- IBM SPSS SamplePower C1Tab - ActiveX Heap Overflow (Metasploit)2013-05-29 · remote · windows · Verified
Impact
Buffer overflow in the c1sizer ActiveX control in C1sizer.ocx in IBM SPSS SamplePower 3.0 before FP1 allows remote attackers to execute arbitrary code via a long TabCaption string.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Spss Samplepower | Version 3.0.0.0 |