Zero Day Initiative ASSOCIATED_WITH zero-day vulnerability
ZDI buys zero-day vulnerabilities from researchers.
Explicit Confidence 99% · Jack Rhysider EP 82 Details
“Specifically, they buy zero-day vulnerabilities.”
Vulnerability
vulnerability:zero_day_vulnerability
Also: zero-day, zero-day bug, zero-days
An unfixed security bug unknown to the vendor, as defined and discussed in the episode.
An unfixed security bug unknown to the vendor, as defined and discussed in the episode.
“this is called a zero-day vulnerability”
“they hadn’t been found before, at least disclosed before”
A vulnerability unknown to the software developer or vendor, or not yet fixed, that can affect fully updated software.
“Zero-day vulnerabilities are bugs that the software developer or vendor doesn’t know exist or has not fixed.”
Previously unknown or unpatched vulnerability discussed in connection with MyBB and later vulnerability research.
“we developed a zero-day exploit”
“an actual unpatched vulnerability”
Software bug unknown to the software maker and defenders, discussed as a vulnerability that may be actively exploited before a fix exists.
“zero-day vulnerabilities are bugs that the software maker doesn’t yet know about”
Previously unknown software vulnerability sought and publicly disclosed by eEye after vendor notification and patching.
“which is what’s known as a zero-day vulnerability”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | AFFECTS | QuickTime | Uncertain | 82 |
| incoming | ASSOCIATED_WITH | Zero Day Initiative | Explicit | 82 |
| incoming | EXPLOITS | MyBB zero-day exploit | Explicit | 109 |
| incoming | EXPLOITS | TriCk | Explicit | 109 |
Zero Day Initiative ASSOCIATED_WITH zero-day vulnerability
ZDI buys zero-day vulnerabilities from researchers.
Explicit Confidence 99% · Jack Rhysider EP 82 Details
“Specifically, they buy zero-day vulnerabilities.”
zero-day vulnerability AFFECTS QuickTime
Dino Dai Zovi reportedly used a bug in QuickTime to take over the MacBook Air during the early contest.
Uncertain Confidence 82% · Dustin Childs EP 82 Details
“I believe he used a bug in QuickTime to take over the system.”
MyBB zero-day exploit EXPLOITS zero-day vulnerability
The exploit was a zero-day exploit developed to take advantage of a MyBB vulnerability.
Explicit Confidence 97% · MLT EP 109 Details
“We actually developed a zero-day exploit at the time”
TriCk EXPLOITS zero-day vulnerability
TriCk exploited the zero-day vulnerability to spawn a shell on MyBB.
Explicit Confidence 99% · MLT EP 109 Details
“it was TriCk that actually exploited the vulnerability to spawn the shell”