[VIM] so was CVE-2009-0696 discovered in the wild?

[Robert Buchholz]

On Wednesday 05 August 2009, security curmudgeon wrote:
> Discovered in the wild, or someone wrote an exploit after information
> leaked out?

The original public report was this:
 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=538975

I have no insight into how the original reporter came to find the bug, 
but the public availability of an exploit mentioned in the ISC advisory 
most probably refers to that Debian bug.


Robert
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part.
Url : http://www.attrition.org/pipermail/vim/attachments/20090805/b989b894/attachment.bin