The Register® — Biting the hand that feeds IT

Tibco middleware in zero-day security flap

Multicasting migraine

Free whitepaper – The starter PKI program

Security researchers have identified multiple unpatched vulnerabilities in a widely-used content distribution package.

Tibco's SmartPGM FX multicasting software is prone to multiple remote vulnerabilities, including four stack-based buffer-overflow flaws, a format-string issue, and a potential denial of service bug.

Hackers might exploit these issues to execute arbitrary code or cause denial-of-service attacks, warns UK consultancy Information Risk Management (IRM).

IRM, which has a track record of discovering bugs in the software, is withholding details of the flaws pending the availability of patches from Tibco.

To date, there's no evidence that the bugs have being used in anger by hackers. Nonetheless, the discovery of the bugs illustrates a wider range of software packages than is commonly imagined can be subject to so-called zero-day vulnerabilities. ®

Free whitepaper – Securing your Microsoft Internet Information Services (MS IIS) web server

Don’t Miss

GoogleGoogle cloud told to encrypt itself

Updated R in RSA wants s in https

thumbs down teaser 75Buggy 'smart meters' open door to power-grid botnet

Grid-burrowing worm only the beginning

Flag ChinaChinese firm hits back at cyberspy claims

Exclusive Huawei welcomes UK.gov backdoor probe

BlockMaster SafeStickBlockMaster SafeStick hardware-encrypted USB drive

Review Tough enough?