Disclosure Timeline:
23/03/2009 : Send proof of concept (ZIP), description the terms under which I cooperate and the planned disclosure date.
04/04/2009 : Send proof of concept (RAR)
07/04/2009 : Ikarus acknowledges receipt, patching Dev builds has begun 10/04/2009 : Resending ZIP PoC
13/04/2009 : Submitting CAB PoC
17/04/2009 : Ikarus demands to delay disclosure
01/05/2009 : Ikarus states that it has started Q&A for the new builds
03/06/2009 : Ikarus informs me that they started deploying the patches/updates Credit will be given on a website to come.
09/06/2009 : Release of this advisory.