CVE-2015-8530: Buffer Overflow
First published: Sat May 14 2016(Updated: )
Stack-based buffer overflow in the Initialize function in an ActiveX control in IBM SPSS Statistics 19 and 20 before 20.0.0.2-IF0008, 21 before 21.0.0.2-IF0010, 22 before 22.0.0.2-IF0011, 23 before 23.0.0.3-IF0001, and 24 before 24.0.0.0-IF0003 allows remote authenticated users to execute arbitrary code via a long argument.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM SPSS Statistics for Windows | >=19.0.0.0<=19.0.0.2 | |
| IBM SPSS Statistics for Windows | >=20.0.0.0<20.0.0.2 | |
| IBM SPSS Statistics for Windows | >=21.0.0.0<21.0.0.2 | |
| IBM SPSS Statistics for Windows | >=22.0.0.0<22.0.0.2 | |
| IBM SPSS Statistics for Windows | >=23.0.0.0<23.0.0.3 | |
| IBM SPSS Statistics for Windows | =24.0.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2015-8530?
CVE-2015-8530 is categorized as a high severity vulnerability due to its ability to allow remote authenticated users to execute arbitrary code.
How do I fix CVE-2015-8530?
To fix CVE-2015-8530, upgrade your IBM SPSS Statistics to version 20.0.0.2-IF0008, 21.0.0.2-IF0010, 22.0.0.2-IF0011, 23.0.0.3-IF0001, or 24.0.0.0-IF0003.
Which versions of IBM SPSS Statistics are affected by CVE-2015-8530?
CVE-2015-8530 affects IBM SPSS Statistics versions 19, 20, 21, 22, 23, and 24 prior to their respective fixed versions.
Can CVE-2015-8530 lead to data breaches?
Yes, CVE-2015-8530 can potentially lead to significant data breaches if exploited by malicious users.
What type of vulnerability is CVE-2015-8530?
CVE-2015-8530 is a stack-based buffer overflow vulnerability that occurs in an ActiveX control.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/last-modified-date
- agent/references
- agent/weakness
- agent/event
- agent/first-publish-date
- agent/description
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/ibm
- canonical/ibm spss statistics for windows
- version/ibm spss statistics for windows/19.0.0.0
- version/ibm spss statistics for windows/19.0.0.2
- version/ibm spss statistics for windows/20.0.0.0
- version/ibm spss statistics for windows/21.0.0.0
- version/ibm spss statistics for windows/22.0.0.0
- version/ibm spss statistics for windows/23.0.0.0
- version/ibm spss statistics for windows/24.0.0.0