, SecurityFocus 2008-04-23
A group of four computer scientists urged Microsoft to redesign the way it distributes patches, after they created a technique that automatically produces attack code by comparing the vulnerable and repaired versions of a program.
Expand all |
Post comment
However, there are three cases:
1) the flaw is exploited before the patch is released,
2) the flaw is exploited after the patch is released, and
3) the flaw is not exploited at all.
The original statement is just saying that 1/3 of flaws belong to case (1) and (2), and the rest are not exploited.
-R
[ reply ]
Link to this comment: http://www.securityfocus.com/comments/articles/11514/35059#35059