From ComputerWorld: A spat between two security companies shows just how sensitive reporting software vulnerabilities can be, particularly when it involves a popular product.
The kerfuffle between FireEye and ERNW, a consultancy in Germany, started after an ERNW researcher found five software flaws in FireEye's Malware Protection System (MPS) earlier this year.
One of the flaws, found by researcher Felix Wilhelm, could be exploited to gain access to the host system, according to an advisory published by ERNW.
As is customary in the industry, ERNW contacted FireEye in early April with details of the problems.
ERNW planned to release an advisory after a 90-day disclosure period, wrote the company's founder, Enno Rey, in a blog post Thursday. But in the next few months, relations between the two companies became strained.
View: Article @ Source Site
