IBM Security Bulletin: Vulnerability in InstallShield affects IBM Tivoli Storage Manager Client (CVE-2016-2542)

InstallShield generates installation executables which are vulnerable to a DLL-planting affecting the IBM Tivoli Storage Manager (IBM Spectrum Protect) Client on Windows platforms.

CVE(s): CVE-2016-2542

Affected product(s) and affected version(s):

The following levels of IBM Tivoli Storage Manager (IBM Spectrum Protect) Client are affected on the Windows platform:

• 7.1.0.0 through 7.1.4.3
• 6.4.0.0 through 6.4.3.2
• 6.3.0.0 through 6.3.2.5
• 6.2, 6.1, and 5.5 all levels (these releases are EOS)

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2975ogo
X-Force Database: http://ift.tt/1rhWtyP

from IBM Product Security Incident Response Team http://ift.tt/2974zEw