IBM Security Bulletin: IBM Forms Viewer may be affected by an Apache Xerces-C XML Parser library vulnerability (CVE-2016-0729)

An IBM Form (XFDL document) that contains a specially crafted mark-up could crash IBM Forms Viewer. This may expose a vulnerability in its use of the Apache Xerces-C XML Parser library.

CVE(s): CVE-2016-0729

Affected product(s) and affected version(s):

IBM Forms Viewer 8.0.1
IBM Forms Viewer 8.1
IBM Forms Viewer 8.2
IBM Forms Viewer 8.2.1

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2c9VRXS
X-Force Database: http://ift.tt/297OoIU



from IBM Product Security Incident Response Team http://ift.tt/2c9VLjg