I sell an Internet Explorer 0day. Command execution - Internet zone. Are you interested? Make an offer.
Bugs in IE are a dime a dozen .. so howabout $0.00833333 for it :)
Seriously though .. check with various vendors .. most offer a "paid disclosure" program if you give them exclusive rights to your vulnerability. Not as much fun as selling it to a hacker perhaps, but more responsible and legal.
~Mike. _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
