IBM Spss Samplepower vulnerabilities

7 CVEs affecting IBM Spss Samplepower, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-0895, published 2014-03-16.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2012-5946, published 2013-04-30. High severity, CVSS 9.3. EPSS: 33.8% chance of exploitation in the next 30 days. Buffer overflow in the c1sizer ActiveX control in C1sizer.ocx in IBM SPSS SamplePower 3.0 before FP1 allows remote attackers to execute arbitrary code via a long TabCaption string.
• CVE-2012-0189, published 2012-01-18. High severity, CVSS 9.3. EPSS: 4.4% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in the (1) PrintFile and (2) SaveDoc methods in the VsVIEW6 ActiveX control in VsVIEW6.ocx in IBM SPSS SamplePower 3.0 allow remote attackers to execute arbitrary…
• CVE-2014-0895, published 2014-03-16. High severity, CVSS 7.5. EPSS: 4% chance of exploitation in the next 30 days. Buffer overflow in the vsflex8l ActiveX control in IBM SPSS SamplePower 3.0.1 before FP1 3.0.1-IM-S3SAMPC-WIN32-FP001-IF02 allows remote attackers to execute arbitrary code via a crafted ComboList…
• CVE-2012-5947, published 2013-04-30. High severity, CVSS 9.3. EPSS: 3.5% chance of exploitation in the next 30 days. Buffer overflow in the vsflex7l ActiveX control in IBM SPSS SamplePower 3.0 before FP1 allows remote attackers to execute arbitrary code via unspecified vectors.
• CVE-2012-5945, published 2013-04-30. High severity, CVSS 9.3. EPSS: 3.5% chance of exploitation in the next 30 days. Multiple buffer overflows in the Vsflex8l ActiveX control in IBM SPSS SamplePower 3.0 before FP1 allow remote attackers to execute arbitrary code via a long (1) ComboList or (2) ColComboList property…
• CVE-2013-6724, published 2014-02-01. High severity, CVSS 9.3. EPSS: 3.1% chance of exploitation in the next 30 days. Unspecified vulnerability in the vsflex8l ActiveX control in IBM SPSS SamplePower 3.0.1 before FP1 IF1 allows remote attackers to execute arbitrary code via a crafted ComboList property value.
• CVE-2013-0593, published 2013-04-27. High severity, CVSS 9.3. EPSS: 3.1% chance of exploitation in the next 30 days. Unspecified vulnerability in the olch2x32 ActiveX control in IBM SPSS SamplePower 3.0 before 3.0-IM-S3SAMPC-WIN32-FP001 allows remote attackers to execute arbitrary code via unknown vectors.