NVD

Id
29735  
Name
CVE-2014-0895  
Description
Buffer overflow in the vsflex8l ActiveX control in IBM SPSS SamplePower 3.0.1 before FP1 3.0.1-IM-S3SAMPC-WIN32-FP001-IF02 allows remote attackers to execute arbitrary code via a crafted ComboList property value.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-03-16  
Modified Date
2015-03-11  
Seq
2014-0895  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
157127 29735 CVE-2014-0895 PI09800  View
157128 29735 CVE-2014-0895 http://www-01.ibm.com/support/docview.wss?uid=swg21666790  View
157129 29735 CVE-2014-0895 http://www.solarwinds.com/documentation/orion/docs/releasenotes/releasenotes.htm  View
157130 29735 CVE-2014-0895 ibm-spss-cve20140895-code-exec(91314)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12809 JVNDB-2014-001684 IBM SPSS SamplePower の vsflex8l ActiveX コントロールにおけるバッファオーバーフローの脆弱性 IBM SPSS SamplePower の vsflex8l ActiveX コントロールには、バッファオーバーフローの脆弱性が存在します。 CVE-2014-0895 68296 CVE-2014-0895 29735 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001684.html 2014-03-07 2015-06-24 View