IBM Security Bulletin: Vulnerability in InstallShield affects IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware (CVE-2016-2542)

InstallShield generates installation executables which are vulnerable to a DLL-planting affecting IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware (IBM Spectrum Protect for Virtual Environments) on Windows platforms.

CVE(s): CVE-2016-2542

Affected product(s) and affected version(s):

The following levels of IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware (IBM Spectrum Protect for Virtual Environments) are affected on the Windows platform:

  • 7.1.0.0 through 7.1.4.0
  • 6.4.0.0 through 6.4.3.2
  • 6.3.0.0 through 6.3.2.6

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/1XVVOiX
X-Force Database: http://ift.tt/1rhWtyP



from IBM Product Security Incident Response Team http://ift.tt/22CzOdG