Please comment on these vulnerabilities

[Anonymous]

Would comment on the following two pages on the web:

http://cert.uni-stuttgart.de/archive.../msg00184.html

http://lists.grok.org.uk/pipermail/f...er/012220.html

[Ray]

That vulnerability (both of those links go to the same report) has been patched and fixed since Version 2.0 build 1019, way back in 2003. This is actually clearly specified in the above reports (see the sections titled "Versions affected", "Solution", and "Vulnerability History").

It is not an issue for any recent versions of Zoom.

[Anonymous]

Thanks

Don't worry, I saw that it was from back in 2003 and I knew the report was old. But, I wanted you to comment on it. Are there any known vulnerabilities (not that you should point it out on the forum) that you are working to fix right now?

[Ray]

No, there are no known vulnerabilities with the current version of Zoom.

[Anonymous]

Do you send out e-mails...

Do you send out an e-mail to your customers if you find a vulnerability, create a patch, and offer the patch on your site?

[Ray]

We release patches promptly and make them available on our site as soon as possible. As you can see in the original report, the patch was made available within a week of finding the vulnerability.

We do not send out mass e-mails at this stage, due to issues with ISPs being sensitive to spam, etc.

Information on the latest release can always be found on this page:
http://www.wrensoft.com/zoom/whatsnew.html
You can also see the history of builds and the regularity of our updates.

The forum here is also a good place to stay up-to-date with any recent issues.