Re: [Full-disclosure] MSIE (mshtml.dll) OBJECT tag vulnerability

From: Michal Zalewski <lcamtuf@xxxxxxxxxxxx>
Date: Fri, 28 Apr 2006 08:10:56 +0200 (CEST)

On Thu, 27 Apr 2006, Brian Eaton wrote:

Please note that I ask this out of curiousity, and not in an attempt to
be critical. Why not give MSRC a head start of one week?

Because, among other things I've already mentioned, it will in no way
affect when they're going to release a patch. Their official policy is to
stick to a weird schedule.

/mz

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Follow-Ups:
- Re: [Full-disclosure] MSIE (mshtml.dll) OBJECT tag vulnerability
  - From: Peter Besenbruch

References:
- RE: [Full-disclosure] MSIE (mshtml.dll) OBJECT tag vulnerability
  - From: Tim Bilbro
- RE: [Full-disclosure] MSIE (mshtml.dll) OBJECT tag vulnerability
  - From: Michal Zalewski
- Re: [Full-disclosure] MSIE (mshtml.dll) OBJECT tag vulnerability
  - From: Brian Eaton

Prev by Date: [Full-disclosure] WinISO/UltraISO/MagicISO/PowerISO Directory Traversal Vulnerability
Next by Date: [Full-disclosure] MSIE Nested Object Vulnerability Is Exploitable
Previous by thread: Re: [Full-disclosure] MSIE (mshtml.dll) OBJECT tag vulnerability
Next by thread: Re: [Full-disclosure] MSIE (mshtml.dll) OBJECT tag vulnerability
Index(es):
- Date
- Thread