CVE-2015-8530

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Stack-based buffer overflow in the Initialize function in an ActiveX control in IBM SPSS Statistics 19 and 20 before 20.0.0.2-IF0008, 21 before 21.0.0.2-IF0010, 22 before 22.0.0.2-IF0011, 23 before 23.0.0.3-IF0001, and 24 before 24.0.0.0-IF0003 allows remote authenticated users to execute arbitrary code via a long argument.

Metrics

CVSS 3.0 6.5/10CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www-01.ibm.com/support/docview.wss?uid=swg21982035Vendor Advisory
http://www.securityfocus.com/bid/90524Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1035867Third Party Advisory, VDB Entry
http://www-01.ibm.com/support/docview.wss?uid=swg21982035Vendor Advisory
http://www.securityfocus.com/bid/90524Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1035867Third Party Advisory, VDB Entry

Timeline

Published: May 14, 2016
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-85316.1Cross-site scripting (XSS) vulnerability in IBM Security Access Manager for Web 8.0 before 8.0.1.3 IF4 and 9.0 before 9.0.0.1 IF1 allows rem CVE-2015-85347.8MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A local privilege escalation vulnerability was discovere CVE-2015-85357.8MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A directory traversal vulnerability was discovered (fixe CVE-2015-85368.8MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A vulnerability was discovered (fixed and publicly discl CVE-2015-85375.3app/views/journals/index.builder in Redmine before 2.6.9, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allows remote attackers to obtain sensi CVE-2015-85386.5dwarf_leb.c in libdwarf allows attackers to cause a denial of service (SIGSEGV).CVE-2015-85397.8The KEYS subsystem in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service (BUG) via crafted keyct CVE-2015-85408.8Integer underflow in the png_check_keyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1 CVE-2015-85428.8An issue was discovered in Open-Xchange Guard before 2.2.0-rev8. The "getprivkeybyid" API call is used to download a PGP Private Key for a s CVE-2015-85437.0The networking implementation in the Linux kernel through 4.3.3, as used in Android and other products, does not validate protocol identifie CVE-2015-85447.5NetApp SnapDrive for Windows before 7.0.2P4, 7.0.3, and 7.1 before 7.1.3P1 allows remote attackers to obtain sensitive information via unspe CVE-2015-85469.8An issue was discovered on Samsung mobile devices with software through 2015-11-12, affecting the Galaxy S6/S6 Edge, Galaxy S6 Edge+, and Ga