Thursday, February 26, 2015
Search
  
Submit your own News for
inclusion in our Site.
Click here...
Breaking News
Net Neutrality Rules Pass FCC
Apple To Hold Watch Event on March 9
ARCHOS Expands Selection of Smartphones During Mobile World Congress
LG 's 2015 OLED And LED 4K ULTRA HD TVs Now Available in The U.S.
WD Adds New NAS Solutions for Business Users to My Cloud Line
Toshiba Launches 8 Megapixel CMOS Image Sensor for Smartphones and Tablets
Samsung To Showcase IoT, Network Functions Virtualization and 5G Technologies at MWC 2015
Intel Introduces New Brand Levels for the Intel Atom Processor
Active Discussions
burning
nvidia 6200 review
Hello
Burning Multimedia in track 0
I'm lazy. Please help.
sanyo e6 camera
need help on some cd burning...
Why Double Logins ?
 Home > News > General Computing > Pwn2Own...
Last 7 Days News : SU MO TU WE TH FR SA All News

Thursday, March 10, 2011
Pwn2Own 2011: IE8 on Windows 7, Safari Hijacked


A 64-bit Windows 7 (SP1) running Internet Explorer 8 system and Apple's Safari browser were the first "victims" at the first day of this year's CanSecWest hacker challenge held 9-11 March in Canada.

Security researcher Stephen Fewer successfully hacked into a 64-bit Windows 7 (SP1) running Internet Explorer 8, taking advantage of three different vulnerabilities. He used zero-day bugs in IE to get code execution and then chained a third vulnerability to jump out of the IE Protected Mode sandbox.

The attack also bypassed DEP (data execution prevention) and ASLR (address space layout randomization), two protection mechanisms built into Windows 7.

Fewer won a $15,000 cash prize and a new Windows laptop.

In addition, researchers from French pen-testing company VUPEN were also on hand with a fully tested exploit for IE8.

VUPEN's researchers also successfully exploited a zero-day flaw in Apple?s Safari browser. By attacking a MacBook, the researchers visited a rigged website and successfully launched a calculator on the compromised machine. The exploit bypassed ASLR (Address Space Layout Randomization) and DEP (Data Execution Prevention), two anti-exploit mitigations built into Mac OS X. The hijacked machine was running a fully patched version of Mac OS X (64-bit).

VUPEN won a $15,000 cash prize and an Apple MacBook Air 13" running Mac OS X Snow Leopard.

On the other hand, none tried to break into Google's Chrome browser. Google offered a $20,000 prize for any successful exploit.


Previous
Next
iPad 2 Arrives Tomorrow at Prices Competitors Cannot Match        All News        New Digital Cameras By Olympus
Google Tool Allows Users To Block Sites From Search Engine     General Computing News      Sony Announces Executive Appointments and Realignment of Key Businesses

Get RSS feed Easy Print E-Mail this Message

Related News
Hackers Stole More Than 300M Dollars From Banks: report
RadioShack Reaches Asset Purchase Agreement with Sprint To Acquire Its Stores
Health Insurer Anthem Hacked
Sony Pictures Entertainment Remains in a State of Breach, Says Research Firm
Sprint To Take Over RadioShack Stores: report
Smart TVs Could Be Hackers' Next Target
Malaysia Airlines And Russian Dating Sites Topface Websites Hacked
Man Arrested in U.K On Suspicion of Christmas Xbox, Playstation Hacks
Military Twitter Accounts And YouTube Sites Hacked
Anonymous Hackers Declare War To Jihadists
Group Claims Responsibility For Attacks Against German Government Websites
Anonymous Declares War on Lizard Squad Hacker Team Who Took Down Playstation And Xbox Networks

Most Popular News
 
Home | News | All News | Reviews | Articles | Guides | Download | Expert Area | Forum | Site Info
Site best viewed at 1024x768+ - CDRINFO.COM 1998-2015 - All rights reserved -
Privacy policy - Contact Us .