https://www.theregister.co.uk/2018/04/04/microsoft_windows_defender_rar_bug/
A remote-code execution vulnerability in Windows Defender – a flaw that can be exploited by malicious .rar files to run malware on PCs – has been traced back to an open-source archiving tool Microsoft adopted for its own use.
[...] Apparently, Microsoft forked that version of unrar and incorporated the component into its operating system's antivirus engine. That forked code was then modified so that all signed integer variables were converted to unsigned variables, causing knock-on problems with mathematical comparisons. This in turn left the software vulnerable to memory corruption errors, which can crash the antivirus package or allow malicious code to potentially execute.
(Score: 3, Interesting) by FatPhil on Monday April 09 2018, @11:05PM (2 children)
This is what RMS keeps saying - the more-free licenses are worse, as they permit others to take desirable rights away.
Great minds discuss ideas; average minds discuss events; small minds discuss people; the smallest discuss themselves
(Score: 0) by Anonymous Coward on Tuesday April 10 2018, @02:17PM (1 child)
Nobody who cares about free software gives two shits about Unrar's license being "too permissive".
Unrar is proprietary and Windows Defender is proprietary and both are bad.
TFA (quoting Google's Tavis Ormandy) calls unrar "open source" which is simply wrong.
(Score: 2) by FatPhil on Wednesday April 11 2018, @07:15PM
RedHat do (URL posted elsewhere by elsewho).
Great minds discuss ideas; average minds discuss events; small minds discuss people; the smallest discuss themselves