CVE-2012-0188

Unspecified vulnerability in the SetLicenseInfoEx method in an ActiveX control in mraboutb.dll in IBM SPSS Dimensions 5.5 and SPSS Data Collection 5.6, 6.0, and 6.0.1 allows remote attackers to execute arbitrary code via a crafted HTML document.

Score

CVSS 2.0 9.3 Critical

Status

Modified - psirt@us.ibm.com

Published

2012-01-18

Last modified

2024-08-06

Affected products

• Spss Data Collection (Ibm)
• Spss Dimensions (Ibm)

References

• http://osvdb.org/78329
• http://secunia.com/advisories/47565
• http://www-01.ibm.com/support/docview.wss?uid=swg21577956
• https://exchange.xforce.ibmcloud.com/vulnerabilities/72118