Notice

Security patch for vulnerability in POLARIS Office

Date
2013-09-10

1. Title: Security patch for vulnerability in POLARIS Office

2. Announcing Company : INFRAWARE, Inc.

3. Application: POLARIS Office, POLARIS Viewer on Android Device

4. Purpose of announcement : To inform and distribute the new version of application with enforced security.

5. Reference report and details : MWR Labs reported the vulnerability in the application(http://www.zerodayinitiative.com/advisories/ZDI-13-211/), and INFRAWARE, in response of this report, released new version of POLARIS VIEWER and OFFICE with enforced security. INFRAWARE commented that the newly released version does not to allow malicious code to get control of the system by the attack method mentioned in the report.

Released application version:

Polaris Office 4.0 (4.0.3210.02)
Polaris Viewer 4.1 (4.1.4210.02)
Polaris Office 5.0 (5.0.3309.02)
Polaris Office Viewer 5.0 (5.0.4309.02)

6. Distribution of released version: The security enforced version will be distributed via direct delivery of apk, Google Play Store and other private market stores.

7. Announce date : 11 Sep 2013