Monday, April 24, 2017
Search
  
Submit your own News for
inclusion in our Site.
Click here...
Breaking News
Micron and Microsoft To Collaborate On Internet of Things Security
The New Radeon Pro Duo Delivers The Power of Two Polaris 10 GPUs
Toshiba to Spin Off 4 Operations
Seagate And DJI Announce New Portable Drive For Storing Drone Footage
Nikon Takes Legal Actions Against ASML and Carl Zeiss Over Semiconductor Lithography Patents
LG X Power 2 Smartphone Packs A Huge Battery
Questions Remain About The Fate Of Toshiba's HDD and SSD Business
SK Hynix Develops First 8Gb GDDR6
Active Discussions
Which of these DVD media are the best, most durable?
How to back up a PS2 DL game
Copy a protected DVD?
roxio issues with xp pro
Help make DVDInfoPro better with dvdinfomantis!!!
menu making
Optiarc AD-7260S review
cdrw trouble
 Home > News > General Computing > Pwn2Own...
Last 7 Days News : SU MO TU WE TH FR SA All News

Thursday, March 13, 2014
Pwn2Own Hacking Contest Win Record $400K So Far


The first day of Pwn2Own 2014 saw successful attempts by five entrants against five products including Internet Explorer, Firefox, and Adobe Flash and Reader. The result was payouts of $400,000 to researchers in the main competition and $82,500 to charity in the Pwn4Fun sponsors-only event.

At Pwn4Fun, Google delivered a very impressive exploit against Apple Safari launching Calculator as root on Mac OS X. Hewlett-Packard's ZDI (Zero Day Initiative) presented a multi-stage exploit, including an adaptable sandbox bypass, against Microsoft Internet Explorer, launching Scientific Calculator (running in medium integrity) with continuation. Combined, the two efforts raised $82,500 for the Canadian Red Cross, the charity agreed upon by both sponsors.

A team from Vupen, a French vulnerability research firm, ended Wednesday $300,000 richer, having hacked Adobe Flash, Adobe Reader, Firefox, and IE11 for a one-day foursome.

To attack Adobe Flash, they exploited a use-after-free vulnerability with an IE sandbox bypass, which resulted in code execution.

"Use-after-free" is a term for a type of memory management bug.

Against Adobe Reader, they demonstrated a heap overflow and PDF sandbox escape, resulting in code execution.

A "sandbox" is an anti-exploit technology deployed by some software that is designed to isolate an application so that if attackers do find a vulnerability in the code, they must "escape" the sandbox, to execute their malicious code on the machine.

Microsoft Internet Explorer's sandbox was bypassed due to a use-after-free vulnerability causing object confusion in the broker.

"Broker" is the label for the part of the sandbox that acts as the supervisor for all protected processes.

Vupen researchers also hit Mozilla's Firefox by taking advantage of a use-after-free flow resulting in code execution.

Researchers Mariusz Mlynski and Jri Aedla atacked Firefox, with each winner picking up $50,000 for their exploit.

Pwn2Own continues today, with researchers slated to tackle Apple's Safari and Google's Chrome, as others take additional attempts at Adobe Flash, Firefox and Internet Explorer.

Also yesterday, Google ran its own one-day "Pwnium 4" contest at CanSecWest, pitting researchers against Chrome OS. A researcher has successfully exploited Chrome OS on an HP Chromebook 11, winning the notebook and a $150,000 prize.




Previous
Next
Google Offers 1TB Of Cloud Storage For $10        All News        European Parliament Approves Common Mobile Charger Plan
Google Offers 1TB Of Cloud Storage For $10     General Computing News      Apple Patent Hints On Health-related Wearable Device

Get RSS feed Easy Print E-Mail this Message

Related News
Dallas Emergency Siren System Hacked
CIA Used Sophisticated Hack Techniques To Apple Devices: WikiLeaks
Google Says Hacked sites Rose in 2016
Hackers Demonstrate VM Escapes In Pwn2Own 2017 Hacking Contest
Pwn2Own Hackers Found Exploits In Safari, Adobe Reader, macOS And More
U.S. Charges Russian Spies Over Yahoo Hacks
Yahoo Unveils New Security Breach
U.S.Navy Disclosed Security Breach In Its Systems
Yahoo Investigates New Hack Claim
Hackers Steal Money From 20,000 Tesco Bank Accounts
Microsoft Identifies Russia-linked Hackers Exploiting Windows Flaw
Multiple Banks Attacked by Hacker Group, Symantec Says

Most Popular News
 
Home | News | All News | Reviews | Articles | Guides | Download | Expert Area | Forum | Site Info
Site best viewed at 1024x768+ - CDRINFO.COM 1998-2017 - All rights reserved -
Privacy policy - Contact Us .