Vulnerability Bulletins |
IBM Security Bulletin: SPSS Statistics ActiveX Control Code Execution Vulnerability Notification (CVE-2015-0140) |
|
| Affected software | IBM |
|
SPSS Statistics ActiveX control on Windows 32 bit installations could allow a remote attacker to execute arbitrary code on the system. By persuading a victim to visit a specially-crafted Web page with Internet Explorer, a local attacker could exploit this vulnerability to execute arbitrary code on the system or cause the application to crash. CVE(s): CVE-2015-0140 Affected product(s) and affected version(s): SPSS Statistics 22.0 on Windows 32 Refer to the following reference URLs More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_spss_statistics_activex_control_code_execution_vulnerability_notification_cve_2015_0140?lang=en_us |
|