NetSight
medium6.5

CVE-2015-8530

Stack-based buffer overflow in the Initialize function in an ActiveX control in IBM SPSS Statistics 19 and 20 before 20.0.0.2-IF0008, 21 before 21.0.0.2-IF0010…

Impact

Stack-based buffer overflow in the Initialize function in an ActiveX control in IBM SPSS Statistics 19 and 20 before 20.0.0.2-IF0008, 21 before 21.0.0.2-IF0010, 22 before 22.0.0.2-IF0011, 23 before 23.0.0.3-IF0001, and 24 before 24.0.0.0-IF0003 allows remote authenticated users to execute arbitrary code via a long argument.

Affected products

VendorProductAffected versions
IbmSpss Statistics
from 19.0.0.0 through 19.0.0.2
from 20.0.0.0 before 20.0.0.2
from 21.0.0.0 before 21.0.0.2
from 22.0.0.0 before 22.0.0.2
from 23.0.0.0 before 23.0.0.3
Version 24.0.0.0

Weakness classification

References