Wednesday, February 11. 2004
OK, this is scary
eEye Digital Security has put up a page of their "upcoming advisories pipeline".
What is this?
These are security issues that they have reported to the vendors. They start the clock on the day they report it, hope for a response in 30 days and expect a response in 60 days. The red is the number of days past 60 that have elapsed with no patch available from the vendor.
94+60=154 days since notification on "A remotely-exploitable vulnerability that allows anonymous attackers to compromise default installations of the affected software and gain the highest possible level of access (SYSTEM)."
That's a vulnerability on an estimated 300 MILLION systems.
Unbelievable.
What is this?
These are security issues that they have reported to the vendors. They start the clock on the day they report it, hope for a response in 30 days and expect a response in 60 days. The red is the number of days past 60 that have elapsed with no patch available from the vendor.
94+60=154 days since notification on "A remotely-exploitable vulnerability that allows anonymous attackers to compromise default installations of the affected software and gain the highest possible level of access (SYSTEM)."
That's a vulnerability on an estimated 300 MILLION systems.
Unbelievable.
Trackbacks
Trackback specific URI for this entry
No Trackbacks