CA shuts down licensing vulnerabilities

Software giant Computer Associates has today released patches for buffer overflow vulnerabilities in its licensing software.

The vulnerabilities affect a common component which runs across a range of CA software on open source, Windows and Apple Mac platforms.

Simon Perry, VP security strategy at CA, told silicon.com the company has been working closely over the past couple with eEye Digital Security and iDEFENSE in identifying the vulnerabilities and testing the patches for robustness.

If exploited the vulnerabilities could have enabled malicious third parties to run code on a compromised machine.

For full details on the patches and how they may be affected CA advises all customers to visit its support page.

The patches can be downloaded here.