Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

Very minor heap address disclosure; measuring time to fix for [Firefox] [Internet Explorer] [Safari]
From: Chris Evans <scarybeasts () gmail com>
Date: Wed, 9 Mar 2011 20:09:20 -0800

Hi,

It's unusual to get both conditions:

- The exact same bug across multiple different codebases.
- Already partially disclosed.

So the rare opportunity will be seized to provide a direct comparison of
response quality and response time. Some might argue that this is a much
better metric than other common metrics such as "bug counting".

It's not serious by any stretch of the imagination, so those looking for
pwnage can stop reading.

Full details,
http://scarybeastsecurity.blogspot.com/2011/03/multi-browser-heap-address-leak-in-xslt.html

Who will handle it best? Results via @scarybeasts


Cheers
Chris
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

  By Date           By Thread  

Current thread:
  • Very minor heap address disclosure; measuring time to fix for [Firefox] [Internet Explorer] [Safari] Chris Evans (Mar 10)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault