CVE-2015-8530

Name: CVE-2015-8530
Creator: NVD / NIST
Published: 2016-05-14T15:59:00.177+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 1.51%

Last modified Jun 17, 2026

CVE-2015-8530 is a vulnerability of currently unknown severity. Stack-based buffer overflow in the Initialize function in an ActiveX control in IBM SPSS Statistics 19 and 20 before 20.0.0.2-IF0008, 21 before 21.0.0.2-IF0010, 22 before 22.0.0.2-IF0011, 23 before 23.0.0.3-IF0001, and 24 before 24.0.0.0-IF0003 allows remote authenticated users to execute arbitrary code via a long argument.. EPSS estimates a 1.51% chance of exploitation in the next 30 days.

Description

Stack-based buffer overflow in the Initialize function in an ActiveX control in IBM SPSS Statistics 19 and 20 before 20.0.0.2-IF0008, 21 before 21.0.0.2-IF0010, 22 before 22.0.0.2-IF0011, 23 before 23.0.0.3-IF0001, and 24 before 24.0.0.0-IF0003 allows remote authenticated users to execute arbitrary code via a long argument.

Metrics

EPSS Probability

1.51%

71.2th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-119

Affected Software

Vendor	Product	Versions
Ibm	Spss Statistics	>= 19.0.0.0, <= 19.0.0.2
Ibm	Spss Statistics	>= 20.0.0.0, < 20.0.0.2
Ibm	Spss Statistics	>= 21.0.0.0, < 21.0.0.2
Ibm	Spss Statistics	>= 22.0.0.0, < 22.0.0.2
Ibm	Spss Statistics	>= 23.0.0.0, < 23.0.0.3
Ibm	Spss Statistics	24.0.0.0

References

http://www-01.ibm.com/support/docview.wss?uid=swg21982035Vendor Advisory
http://www.securityfocus.com/bid/90524Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1035867Third Party Advisory, VDB Entry
http://www-01.ibm.com/support/docview.wss?uid=swg21982035Vendor Advisory
http://www.securityfocus.com/bid/90524Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1035867Third Party Advisory, VDB Entry

Timeline

Published: May 14, 2016
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2015-8530?

How severe is CVE-2015-8530?

Severity scoring for CVE-2015-8530 is pending analysis. The EPSS model estimates a 1.51% probability of exploitation in the next 30 days.

How do I fix CVE-2015-8530?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2015-8530?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST