Re: [Full-disclosure] Re: [MPlayer-users] [xfocus-SD-060329]MPlayer: Multiple integer overflows



just according to MPlayer DOC/bugreports.html
1:Subscribing to MPlayer-users maillist
2:send bug to mplayer-users@xxxxxxxxxxxx

Attila Kinali wrote:
Hi everyone,

Just to make a statement now for all those "we care about your
security" groups out there.

IF YOU FOUND A SECURITY RELATED BUG IN A SOFTWARE,
CONTACT THE DEVELOPERS FIRST BEFORE YOU GO PUBLIC!

Otherwise there is no meaning in writing such a report at all.
Or are you so stupid that you think that we could fix the bug
and release a new version the very same moment you release
your advisory?
Have you an idea how many people you put at risk by your stupidty?

Attila Kinali



--

Kind Regards,

---
XFOCUS Security Team
http://www.xfocus.org

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/



Relevant Pages

  • Risks Digest 24.91
    ... ACM FORUM ON RISKS TO THE PUBLIC IN COMPUTERS AND RELATED SYSTEMS ... Adi Shamir's bug attack ... Security company e-mail undercuts user education ...
    (comp.risks)
  • Exim 3.34 and lower.
    ... Its a good time to announce that 2xs security LTD. decided to ... GDB is free software, covered by the GNU General Public License, and you ... will research and fix this bug. ... > the end of the string, reading garbage, causing a segfault, whatever. ...
    (Vuln-Dev)
  • [UNIX] Bugzilla Unauthorized Bug Modification And Information Disclosure Vulnerabilities
    ... Get your security news from a reliable source. ... unauthorized bug modifications possible by a third party. ... Private User Comments and Attachment Summaries Leak In XML Bug Export ... Private Metadata Changes For Attachments Information Leak ...
    (Securiteam)
  • Re: Security researchers organization
    ... > The Sardonix.org security auditing web site was designed to ... Sardonix provides: ... prevent last year's Chunked Encoding bug? ... -> this provides a reason for individual team members to share their ...
    (NT-Bugtraq)
  • Re: [stable] Linux 2.6.25.10 (resume)
    ... -Linux kernel developers take security very seriously. ... security bug is found so that it can be fixed as soon as possible. ... In the meantime you might want to define "disclose" as ...
    (Linux-Kernel)