CVE-2012-0188

Unspecified vulnerability in the SetLicenseInfoEx method in an ActiveX control in mraboutb.dll in IBM SPSS Dimensions 5.5 and SPSS Data Collection 5.6, 6.0, and 6.0.1 allows remote attackers to execute arbitrary code via a crafted HTML document.

CVSS v2.0 9.3 HIGH

9.3^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 8.6 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://osvdb.org/78329
http://secunia.com/advisories/47565	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21577956	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/72118
http://osvdb.org/78329
http://secunia.com/advisories/47565	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21577956	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/72118

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ibm:spss_data_collection:5.6:::::::*
	cpe:2.3:a:ibm:spss_data_collection:6.0:::::::*
	cpe:2.3:a:ibm:spss_data_collection:6.0.1:::::::*
	cpe:2.3:a:ibm:spss_dimensions:5.5:::::::*

History

21 Nov 2024, 01:34

Type	Values Removed	Values Added
References	~~() http://osvdb.org/78329 -~~	() http://osvdb.org/78329 -
References	~~() http://secunia.com/advisories/47565 - Vendor Advisory~~	() http://secunia.com/advisories/47565 - Vendor Advisory
References	~~() http://www-01.ibm.com/support/docview.wss?uid=swg21577956 - Vendor Advisory~~	() http://www-01.ibm.com/support/docview.wss?uid=swg21577956 - Vendor Advisory
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/72118 -~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/72118 -

Information

Published : 2012-01-18 20:55

Updated : 2024-11-21 01:34

NVD link : CVE-2012-0188

Mitre link : CVE-2012-0188

CVE.ORG link : CVE-2012-0188

JSON object : View

Products Affected

ibm

spss_data_collection
spss_dimensions

CWE

NVD-CWE-noinfo

{"id": "CVE-2012-0188", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2012-01-18T20:55:02.957", "references": [{"url": "http://osvdb.org/78329", "source": "psirt@us.ibm.com"}, {"url": "http://secunia.com/advisories/47565", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21577956", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72118", "source": "psirt@us.ibm.com"}, {"url": "http://osvdb.org/78329", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/47565", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21577956", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72118", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the SetLicenseInfoEx method in an ActiveX control in mraboutb.dll in IBM SPSS Dimensions 5.5 and SPSS Data Collection 5.6, 6.0, and 6.0.1 allows remote attackers to execute arbitrary code via a crafted HTML document."}, {"lang": "es", "value": "Vulnerabilidad no especificada en el m\u00e9todo SetLicenseInfoEx en un control ActiveX en mraboutb.dll en IBM SPSS Dimensions v5.5 y SPSS Data Collection v5.6, v6.0 y v6.0.1 permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de un documento HTML espec\u00edficamente creado para este fin."}], "lastModified": "2024-11-21T01:34:32.870", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:spss_data_collection:5.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EBD74B7A-70F6-4EF3-BA59-884BF747B87A"}, {"criteria": "cpe:2.3:a:ibm:spss_data_collection:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ED735680-3700-4744-857C-EA2F005D89E6"}, {"criteria": "cpe:2.3:a:ibm:spss_data_collection:6.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "673496DB-11BB-4FEB-9772-175F5D45859F"}, {"criteria": "cpe:2.3:a:ibm:spss_dimensions:5.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3C10724E-2F42-4B5D-8D16-4738C5567547"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@us.ibm.com"}