[Full-disclosure] ZDI-07-006: Citrix Metaframe Presentation Server Print Provider Buffer Overflow Vulnerability

[Christian Kujau]

On Wed, 24 Jan 2007, zdi-disclosures at 3com.com wrote:
> -- Disclosure Timeline:
> 2005.07.07 - Pre-exiting Digital Vaccine released to TippingPoint
> customers
> 2006.10.02 - Vulnerability reported to vendor
> 2007.01.24 - Coordinated public release of advisory

out of curiosity: why took it 1+ year to report this vulneralbility to 
the vendor?

-- 
BOFH excuse #366:

ATM cell has no roaming feature turned on, notebooks can't connect