IBM Security Bulletin: Vulnerability in InstallShield affects IBM Tivoli Storage Manager for Virtual Environments: Data Protection for Microsoft Hyper-V (CVE-2016-2542)

InstallShield generates installation executables which are vulnerable to a DLL-planting affecting IBM Tivoli Storage Manager for Virtual Environments: Data Protection for Microsoft Hyper-V (IBM Spectrum Protect for Virtual Environments) on Windows platforms.

CVE(s): CVE-2016-2542

Affected product(s) and affected version(s):

The following levels of IBM Tivoli Storage Manager for Virtual Environments: Data Protection for Microsoft Hyper-V (IBM Spectrum Protect for Virtual Environments) are affected on the Windows platform:

  • 7.1.0.0 through 7.1.4.0

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/1XVVMrq
X-Force Database: http://ift.tt/1rhWtyP



from IBM Product Security Incident Response Team http://ift.tt/22CzFqK