Tibco middleware in zero-day security flap
PrintMulticasting migraine
Posted in Software & Security, 18th October 2007 13:44 GMT
Free whitepaper – Managing desktop software for fun and profit
Security researchers have identified multiple unpatched vulnerabilities in a widely-used content distribution package.
Tibco's SmartPGM FX multicasting software is prone to multiple remote vulnerabilities, including four stack-based buffer-overflow flaws, a format-string issue, and a potential denial of service bug.
Hackers might exploit these issues to execute arbitrary code or cause denial-of-service attacks, warns UK consultancy Information Risk Management (IRM).
IRM, which has a track record of discovering bugs in the software, is withholding details of the flaws pending the availability of patches from Tibco.
To date, there's no evidence that the bugs have being used in anger by hackers. Nonetheless, the discovery of the bugs illustrates a wider range of software packages than is commonly imagined can be subject to so-called zero-day vulnerabilities. ®
Free whitepaper – Managing desktop software for fun and profit
Managing desktop software for fun and profit
Analyst Keynote: The Register Agile Data Center Summit
Dell PowerEdge R710 solution with VMware ESX vs. Dell PowerEdge 2850 solution
Seven ways to lower storage costs
Sign up, sign up for The Register IT security newsletter
Microsoft's Windows 7 price gamble - and why it's flawed
Managing Desktop Software for fun and profit
Intel's flash new SSDs hit by bugs