[xdude]

Yeah it is a surprise, specially in age of internet. Now it's normal for Version based software not getting patched up. For example Winodws they always focus on next version than the old version which they won't get any profit anymore. This often happens in smaller companies but yeah larger companies ignore these when it's too complicated to fix or financially not feasible. But today Internet makes new travel fast so service providing company Dropbox could loose premium users by something like this.

Anyway after reading more about this I realised its not something easy to exploit. You do need to have local user access to exploit this vulnerability. I guess, maybe that's why they didn't bother about. I mean if local user access is compromised Dropbox is least of your nightmares.