[vlc-devel] PROBABLY_EXPLOITABLE Reporting

Daniel Hood dsmhood at gmail.com
Thu May 17 02:39:07 CEST 2012


I have a VLC crash here that is rated as "PROBABLY_EXPLOITABLE" by !exploitable.

Whats the policy for disclosing it safely.

Do I need to privately disclose it somewhere to stop the security risk
of someone creating an exploit for it before its patched or?

Regards,

Daniel



More information about the vlc-devel mailing list