RE: Six Step IE Remote Compromise Cache Attack

[white colin john <cjwhite1 () ehlnx13 ews uiuc edu>]

On Wed, 5 Nov 2003, Thor Larholm wrote:

> This post raises an interesting question. Is our goal to find new
> vulnerabilities and attack vectors to help secure users and critical
> infrastructures, or is our goal to ease exploitation of existing
> vulnerabilities?

If there's no proof-of-concept that shows current bugs can be combined 
into an exploit, is there any pressure on microsoft to patch the bugs?