CVE-2012-5946

CVE-2012-5946 describes a critical buffer overflow vulnerability in the c1sizer ActiveX control within IBM SPSS SamplePower 3.0 prior to FP1. This flaw allows remote attackers to execute arbitrary code by supplying an overly long TabCaption string. With a CVSS score of 9.3, this vulnerability is highly severe, requiring moderate attack complexity but enabling complete compromise of confidentiality, integrity, and availability. While not listed on CISA's KEV catalog, exploit code is publicly available via Metasploit, though there is no evidence of widespread active exploitation or significant community discussion.