A flaw exists within the way the IBM Tivoli Provisioning Manager Express for Software ActiveX Control parses data supplied to the RunAndUploadFile function. The ActiveX control is used to create an Asset Information file for the local system to be uploaded to the IBM Tivoli Provisioning Manager Express Server. This update corrects the CVE number, adds support for Internet Explorer 8 and disables DEP. This update improves the exploit.
Friday, June 8, 2012 - 00:00