Posted by Gregory Sloop on Oct 04
I attempted private contact with Tim Pham and via email 12+ hours ago, but received no response since then.
I’ve spent some time trying to reproduce the reported vulnerability and have had no success. It certainly doesn’t help
that the steps to reproduce it are so poorly described or documented.
Without better documentation of the exploit, it seems impossible to determine if the report is just mis-informed,
blatantly false, or if…