Boletines de Vulnerabilidades

IBM Security Bulletin: IBM SPSS SamplePower vsflex8l ActiveX Control ComboList Property Remote Code Execution Vulnerability (CVE-2013-6724)


Información sobre el sistema

   
Software afectado IBM

Descripción

There is security vulnerability with an ActiveX control shipped by IBM SPSS SamplePower Version 3.0.1. This is corrected in IBM SPSS SamplePower 3.0.1 IF1. CVE(s): CVE-2013-6724 Affected product(s) and affected version(s): IBM SPSS SamplePower for Windows V3.0.1 Refer to the following reference URLs for remediation and additional vulnerability details: Source Bulletin: http://www-01.ibm.com/support/docview.wss?uid=swg21663250 X-Force Database: http://xforce.iss.net/xforce/xfdb/89279

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_ibm_spss_samplepower_vsflex8l_activex_control_combolist_property_remote_code_execution_vulnerability_cve_2013_6724?lang=en_us

Identificadores estándar

Propiedad Valor
CVE CVE-2013-6724 ,CVE-2013-4002 ,CVE-2013-5825 ,CVE-2013-5372 ,CVE-2014-0416 ,CVE-2014-0411 ,CVE-2013-5907 and CVE-2014-0417.

Histórico de versiones

Versión Comentario Fecha
1.0 Advisory issued 2014-03-11

Miembros de

Ministerio de Defensa
CNI
CCN
CCN-CERT