Dailydave mailing list archives
A new datapoint for 0day lifetime
From: "Rhys Kidd" <rhyskidd () gmail com>
Date: Mon, 11 Aug 2008 10:50:55 +0800
Justine Aitel made the following statements during a July 2007 presentation: *"Real-world 0day Statistics* *Average 0day lifetime: 348 days Shortest life: 99 days Longest life: 1080 (3 years)" *- http://immunityinc.com/downloads/0day_IPO.pdf* *I'd like to include a new datapoint for those averages. uTorrent and Bittorrent Mainline have included an unpatched Unicode stack overflow in its code-base for at least 2 years. It was finally patched on the 5th August 2008 with 1.8 Release Candidate 7. Full details and discussion in the attached paper. Rhys
Attachment:
Stack Overflow in uTorrent - Kidd.pdf
Description:
_______________________________________________ Dailydave mailing list Dailydave () lists immunitysec com http://lists.immunitysec.com/mailman/listinfo/dailydave
Current thread:
- A new datapoint for 0day lifetime Rhys Kidd (Aug 11)