CVE-2012-0190

Unspecified vulnerability in the Render method in the ExportHTML.ocx ActiveX control in ExportHTML.dll in IBM SPSS Dimensions 5.5 and SPSS Data Collection 5.6, 6.0, and 6.0.1 allows remote attackers to execute arbitrary code via a crafted HTML document.

CVSS v2.0 9.3 HIGH

9.3^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 8.6 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://secunia.com/advisories/47565	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21577956	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/72121

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ibm:spss_data_collection:5.6:::::::*
	cpe:2.3:a:ibm:spss_data_collection:6.0:::::::*
	cpe:2.3:a:ibm:spss_data_collection:6.0.1:::::::*
	cpe:2.3:a:ibm:spss_dimensions:5.5:::::::*

History

No history.

Information

Published : 2012-01-18 20:55

Updated : 2023-12-10 11:03

NVD link : CVE-2012-0190

Mitre link : CVE-2012-0190

CVE.ORG link : CVE-2012-0190

JSON object : View

Products Affected

ibm

spss_dimensions
spss_data_collection

CWE

NVD-CWE-noinfo

{"id": "CVE-2012-0190", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2012-01-18T20:55:03.317", "references": [{"url": "http://secunia.com/advisories/47565", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21577956", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72121", "source": "psirt@us.ibm.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the Render method in the ExportHTML.ocx ActiveX control in ExportHTML.dll in IBM SPSS Dimensions 5.5 and SPSS Data Collection 5.6, 6.0, and 6.0.1 allows remote attackers to execute arbitrary code via a crafted HTML document."}, {"lang": "es", "value": "Una vulnerabilidad no especificada en el m\u00e9todo Render en el control ActiveX ExportHTML.ocx en la librer\u00eda ExportHTML.dll de IBM SPSS Dimensiones v5.5 y SPSS Data Collection v5.6, v6.0 y v6.0.1 permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de un documento HTML espec\u00edficamente modificado paratal fin."}], "lastModified": "2017-08-29T01:30:51.570", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:spss_data_collection:5.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EBD74B7A-70F6-4EF3-BA59-884BF747B87A"}, {"criteria": "cpe:2.3:a:ibm:spss_data_collection:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ED735680-3700-4744-857C-EA2F005D89E6"}, {"criteria": "cpe:2.3:a:ibm:spss_data_collection:6.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "673496DB-11BB-4FEB-9772-175F5D45859F"}, {"criteria": "cpe:2.3:a:ibm:spss_dimensions:5.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3C10724E-2F42-4B5D-8D16-4738C5567547"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@us.ibm.com"}