4 ms·

I don't have a confirmed exploit (other than a DoS, but I don't think that's very interesting). I think it may be exploitable but I haven't looked into the "how

I don't have a confirmed exploit (other than a DoS, but I don't think that's very interesting). I think it may be exploitable but I haven't looked into the "how" and don't really intend to. I just know it's a hole.

acdha 12y ago
In that case I'd probably vote for just giving them another email. If you're not certain, it's probably not worth the effort of a full advisory.
- wfunction 12y ago
  Ok thanks