IBM Security Bulletin: Vulnerability in InstallShield affects IBM Tivoli Storage FlashCopy Manager on Windows (CVE-2016-2542)

InstallShield generates installation executables which are vulnerable to a DLL-planting affecting IBM Tivoli Storage FlashCopy Manager on Windows (IBM Spectrum Protect Snapshot).

CVE(s): CVE-2016-2542


Affected product(s) and affected version(s):

The following levels of IBM Tivoli Storage FlashCopy Manager on Windows (IBM Spectrum Protect) are affected:

• 4.1.0.0 through 4.1.4.1
• 3.2.0.0 through 3.2.1.8
• 3.1.0.0 through 3.1.1.5
• 2.2 all levels
• 2.1 all levels

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/21E2uCM
X-Force Database: http://ift.tt/1rhWtyP


from IBM Product Security Incident Response Team http://ift.tt/21E2se9