Security flaws 'undiscovered for years'

Security holes that can be exploited by hackers can lie dormant for up to 10 years, a study suggests.