It was reported to them on the 23rd of February. Now we have 24th of May. That's not quick. But they had to do something after it became public, didn't they?
If anyone wants to test it again, here's the original proof of concept:
http://www.insecure.ws/article.php?s...04051612423136
Here's what I get in OmniWeb:
It says: "Attention: The following DiskImages couldn't be activated, Reason: No such file or folder."
