Re: MSIE (mshtml.dll) OBJECT tag vulnerability

[Michal Zalewski <lcamtuf () dione ids pl>]

On Thu, 27 Apr 2006, Brian Eaton wrote:

> Please note that I ask this out of curiousity, and not in an attempt to
> be critical. Why not give MSRC a head start of one week?

Because, among other things I've already mentioned, it will in no way
affect when they're going to release a patch. Their official policy is to
stick to a weird schedule.

/mz

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/