US-CERT Vulnerability Note VU#162289

Chad Dougherty crd@cert.org
Wed Apr 23 12:39:00 GMT 2008


Mark Mitchell wrote:
> However, I'm surprised that only GCC is listed as "vulnerable" at the 
> bottom of the page.  We've provided information about a lot of other 
> compilers that do the same optimization.  Why is the status for 
> compilers from Microsoft, Intel, IBM, etc. listed as "Unknown" instead 
> of "Vulnerable"?
> 

The vendors listed in that section are the ones we've contacted asking 
for a statement.  The note gets updated as we get information from them. 
  We won't include information about other vendors without either a 
statement from them or independent verification of their affectedness.

	-Chad



More information about the Gcc mailing list