Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.3

IBM SPSS Data Collection and Dimensions can run malicious code

CVE-2012-0190 · published 14 years ago
Summary

The ExportHTML component in IBM SPSS Data Collection (versions 5.6, 6.0, 6.0.1) and SPSS Dimensions 5.5 can be tricked by a specially crafted web page to run unwanted programs on the computer. This could let an attacker take control of the system without the user’s knowledge. Apply the latest security updates from IBM or disable the affected ActiveX control until it is patched.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
ibm spss_data_collection 5.6
6.0
6.0.1
cpe:2.3:a:ibm:spss_data_collection:5.6:*:*:*:*:*:*:*
ibm spss_dimensions 5.5
cpe:2.3:a:ibm:spss_dimensions:5.5:*:*:*:*:*:*:*
Original advisory text
Unspecified vulnerability in the Render method in the ExportHTML.ocx ActiveX control in ExportHTML.dll in IBM SPSS Dimensions 5.5 and SPSS Data Collection 5.6, 6.0, and 6.0.1 allows remote attacker...
Unspecified vulnerability in the Render method in the ExportHTML.ocx ActiveX control in ExportHTML.dll in IBM SPSS Dimensions 5.5 and SPSS Data Collection 5.6, 6.0, and 6.0.1 allows remote attackers to execute arbitrary code via a crafted HTML document.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
9.3 Critical
Exploitation
3% chance of attack within 30 days
Timeline
Published18 Jan 2012
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2012-0190 · NVD
Track software like this
Free during beta