CVE-2012-5946: IBM Spss Samplepower

High severity, CVSS 9.3. EPSS: 33.8% chance of exploitation in the next 30 days.

Buffer overflow in the c1sizer ActiveX control in C1sizer.ocx in IBM SPSS SamplePower 3.0 before FP1 allows remote attackers to execute arbitrary code via a long TabCaption string.

Affected products

• IBM Spss Samplepower: version 3.0.0.0 only

Published 2013-04-30. Last modified 2026-06-16.