What is interesting about this patch is that it came twenty-two days after it was exposed during the month long project called the ?Month of Apple Bugs? or MoAB for short. While it is a positive thing to see a patch released, the time it took was a disappointment. The bug was disclosed with full details and working exploitation code. Many online are asking why it was so long before a patch was released.

On the MoAB website, the person who released the code, a researcher named LMH, said, ?22 days to fix a remote arbitrary code execution issue in one of their most extended products, distributed with working exploits for both Microsoft Windows and Mac OS X versions can be considered acceptable timing. Come on, it's not that difficult to change a strcpy() call... is it??