oss-sec mailing list archives

Re: Re: strings / libbfd crasher


From: mancha <mancha1 () zoho com>
Date: Wed, 5 Nov 2014 21:31:11 +0000

On Tue, Nov 04, 2014 at 04:39:09AM -0500, cve-assign () mitre org wrote:
Four of the main factors that affect libbfd CVE assignments are:

  1. existence of a "multi-session" use case
  2. discussion of exploitability of a specific attack vector
  3. likelihood of exploitability of classes of observed behavior
  4. actual or expected volume of distinct discoveries

We'll try to give an example of each of these.

[SNIP]

Very interesting read. Thank you for taking the time to write it up.

--mancha

Attachment: _bin
Description:


Current thread: