IBM Security Bulletin: BigFix Platform could allow a remote attacker to execute arbitrary code

BigFix Platform could allow execution of arbitrary code, caused by a use-after-free race condition

CVE(s): CVE-2016-6082

Affected product(s) and affected version(s):

BigFix Platform Version 9.0

BigFix Platform Version 9.1

BigFix Platform Version 9.2

BigFix Platform Version 9.5

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2iLhWNt
X-Force Database: http://ift.tt/2hNvT0k

from IBM Product Security Incident Response Team http://ift.tt/2iLibYX