IBM Security Bulletin: Vulnerability in InstallShield affects IBM Tivoli Storage Manager for Databases: Data Protection for Microsoft SQL Server (CVE-2016-2542)

InstallShield generates installation executables which are vulnerable to a DLL-planting affecting the IBM Tivoli Storage Manager for Databases: Data Protection for Microsoft SQL Server (IBM Spectrum Protect for Databases) on Windows platforms.

CVE(s): CVE-2016-2542


Affected product(s) and affected version(s):

The following levels of IBM Tivoli Storage Manager for Databases: Data Protection for Microsoft SQL Server (IBM Spectrum Protect for Databases) are affected:

• 7.1.0.0 through 7.1.4.1
• 6.4.0.0 through 6.4.1.8
• 6.3.0.0 through 6.3.1.6
• 5.5 all levels (this release is End Of Service and End of Life Cycle is 4/30/2017)

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/1NlICSu
X-Force Database: http://ift.tt/1rhWtyP


from IBM Product Security Incident Response Team http://ift.tt/21E2uTl