VUPEN Security Research <[email protected]> wrote in http://www.securityfocus.com/archive/1/526402 : > X. DISCLOSURE TIMELINE > 2012-02-15 - Vulnerability Discovered by VUPEN > 2013-03-06 - Vulnerability Exploited At Pwn2Own 2013 and Reported to Adobe > 2013-04-17 - Public disclosure
Is a delay of a year before reporting to the vendor, acceptable? Thanks, Paul Paul Szabo [email protected] http://www.maths.usyd.edu.au/u/psz/ School of Mathematics and Statistics University of Sydney Australia _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
