IBM Security Bulletin: Vulnerability in InstallShield affects IBM Tivoli Storage Manager Client (CVE-2016-2542)
InstallShield generates installation executables which are vulnerable to a DLL-planting affecting the IBM Tivoli Storage Manager (IBM Spectrum Protect) Client on Windows platforms.
CVE(s): CVE-2016-2542
Affected product(s) and affected version(s):
The following levels of IBM Tivoli Storage Manager (IBM Spectrum Protect) Client are affected on the Windows platform:
- 7.1.0.0 through 7.1.4.3
- 6.4.0.0 through 6.4.3.2
- 6.3.0.0 through 6.3.2.5
- 6.2, 6.1, and 5.5 all levels (these releases are EOS)
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2975ogo
X-Force Database: http://ift.tt/1rhWtyP
from IBM Product Security Incident Response Team http://ift.tt/2974zEw