IBM Security Bulletin: IBM Personal Communications with IBM GSKit - Malformed ECParameters causes infinite loop (CVE-2015-1788)

GSKit is an IBM component that is used by IBM Personal Communications. The GSKit that is shipped with IBM Personal Communications does not properly handle ECParameters structures in which the curve is over a malformed binary polynomial field, which allows...

from IBM Product Security Incident Response Team http://ift.tt/1hGeKRl