IBM has warned that bugs in its Notes auto-updater mean the service can be tricked into running malicious code. In its advisory, IBM says the Notes Smart Updater service, which sees upgrades of Notes sent to users’ desktops, “can be misguided into running malicious code from a DLL masquerading as a windows DLL in the temp directory.” Compromising an auto-updater is serious business:

Read full news article on The Register