4 ms·
Huh, doesn't making it publicly known before patching it in PHP constitute a 0day? Or by unpatched did they mean patched upstream but not here?
by kjeetgill 8y ago
Huh, doesn't making it publicly known before patching it in PHP constitute a 0day? Or by unpatched did they mean patched upstream but not here?
- busterarm 8y agoThis is one that people have been getting wrong for decades. "A zero-day (also known as 0-day) vulnerability is a computer-software vulnerability that is unknown to those who would be interested in mitigating the vulnerability (including the vendor of the target software)" Patching and knowing about the vulnerability are different things. And so, this is not 0day.
- YouKnowBetter 8y agoNo idea why you are getting downvoted, since this perfectly acceptable explaination of a 0-day.