Secunia

Some vulnerabilities have been reported in DB2 Content Manager, which potentially can be exploited by malicious users to cause a DoS (Denial of Service).

1) An error exists in the library server when creating a text index of an imported Exel file. This may be exploited by malicious users to cause the "db2fmp" process to consume large amount of CPU resources by importing a malformed Exel file.

2) An unspecified error in the handling of LZH files on AIX may cause a crash in the INSO code.

Several other issues, which may be security related, have also been fixed.

Solution
Apply Content Manager Version 8.2 Fix Pack 10 (requires Fix Pack 8).
Further details available in Customer Area

Provided and/or discovered by
Reported by vendor.

Original Advisory
IBM:
http://www-1.ibm.com/support/docview.wss?uid=swg1IO00737
http://www-1.ibm.com/support/docview.wss?uid=swg27005891&aid=3

Deep Links
Links available in Customer Area