IBM Security Bulletin: IBM Notes HarfBuzz is vulnerable to a denial of service information disclosure (CVE-2015-8947)
IBM Notes is consuming Xulrunner version 1.0.6. IBM has addressed a vulnerability in Xulrunner which may result in denial of service or have an unspecified impact.
CVE(s): CVE-2015-8947
Affected product(s) and affected version(s):
IBM Notes 9.0.1 FP6 and earlier release IBM Notes 9.0.1 64-bit IF4 and earlier releases
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2dFe4PW
X-Force Database: http://ift.tt/2cOHWDv
from IBM Product Security Incident Response Team http://ift.tt/2dFeohG