Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.3

IBM SPSS Dimensions and Data Collection can run malicious code

CVE-2012-0188 · published 14 years ago
Summary

The SPSS Dimensions 5.5 and SPSS Data Collection versions 5.6, 6.0, and 6.0.1 contain a flaw in a component that can be triggered by a specially crafted web page. An attacker could cause the software to execute unwanted code on a user's computer. Apply the latest security updates from IBM or disable the affected ActiveX control until it is patched.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
ibm spss_data_collection 5.6
6.0
6.0.1
cpe:2.3:a:ibm:spss_data_collection:5.6:*:*:*:*:*:*:*
ibm spss_dimensions 5.5
cpe:2.3:a:ibm:spss_dimensions:5.5:*:*:*:*:*:*:*
Original advisory text
Unspecified vulnerability in the SetLicenseInfoEx method in an ActiveX control in mraboutb.dll in IBM SPSS Dimensions 5.5 and SPSS Data Collection 5.6, 6.0, and 6.0.1 allows remote attackers to exe...
Unspecified vulnerability in the SetLicenseInfoEx method in an ActiveX control in mraboutb.dll in IBM SPSS Dimensions 5.5 and SPSS Data Collection 5.6, 6.0, and 6.0.1 allows remote attackers to execute arbitrary code via a crafted HTML document.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
9.3 Critical
Exploitation
3% chance of attack within 30 days
Timeline
Published18 Jan 2012
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2012-0188 · NVD
Track software like this
Free during beta