OK, it appears that these issues are not fixed (some of them, at least). Secunia reported on 25 November 2003, basically 10 working days ago, with Thanksgiving in the interim (losing at least two working days between the two).
It doesn't appear that Liu Die Yu is actually reporting these issues directly to Microsoft, expecting them to either know about them or to pick them up from the web (or NTBugTraq. This is highly irresponsible behaviour, IMO.
Maybe I'll fire off an email to securityATmicrosoftDOTcom (which is what you should do if you find a security issue)
No comments:
Post a Comment