How many of these vulnerabilities still exist? What was each companies' response?
Was the number of updates included in the study? For example if company x releases a product with 2 vulnerabilities in 2005 and never releases an update it still only has 2 vulnerabilities. While company z released updates every year and has 5 vulnerabilities in 2010 but all the previous holes have been plugged. Certainly some further clarification is needed to make an accurate assessment of each of the program/os security flaws.
The best of ZDNet, delivered
ZDNet Newsletters
Get the best of ZDNet delivered straight to your inbox
