So Microsoft sat on a bug report about a remotely exploitable bug in Active Directory which potentially allows...

Originally shared by Andreas Proschofsky

So Microsoft sat on a bug report about a remotely exploitable bug in Active Directory which potentially allows attackers to take control of the whole system? (And even now didn't fix all Windows versions). More proof that Google is absolutely right with their automatic disclosure policy (after three months) with Project Zero.
http://arstechnica.com/security/2015/02/15-year-old-bug-allows-malicious-code-execution-in-all-versions-of-windows/