CVE-2012-0189

Published Jan 18, 2012 ibm

Overview

CVE-2012-0189 is a known-severity vulnerability affecting ibm spss_samplepower. It was published on January 18, 2012.

Technical Description

Multiple unspecified vulnerabilities in the (1) PrintFile and (2) SaveDoc methods in the VsVIEW6 ActiveX control in VsVIEW6.ocx in IBM SPSS SamplePower 3.0 allow remote attackers to execute arbitrary code via a crafted HTML document.

Remediation

Check the references section for vendor advisories and patches from ibm. Update spss_samplepower to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

Vendor	Product	Versions	Status

References

Ref secunia.com/advisories/47605 Ref www.ibm.com/support/docview.wss?uid=swg21577951 Ref exchange.xforce.ibmcloud.com/vulnerabilities/72119 Ref secunia.com/advisories/47605 Ref www.ibm.com/support/docview.wss?uid=swg21577951 Ref exchange.xforce.ibmcloud.com/vulnerabilities/72119

Frequently Asked Questions

What is CVE-2012-0189?

CVE-2012-0189 is a known-severity vulnerability affecting ibm spss_samplepower. It was published on January 18, 2012.

How severe is CVE-2012-0189?

CVSS score information is not yet available for this vulnerability. Check back as the CVE record is updated by NVD analysts.

How do I fix or remediate CVE-2012-0189?

How can CyberStrike help with CVE-2012-0189?

CyberStrike's AI-powered security agents can automatically detect CVE-2012-0189 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.