Saturday, October 25, 2014
Search
  
Submit your own News for
inclusion in our Site.
Click here...
Breaking News
Internet Explorer 11 Toolkit Allows Enterprise Admins "Spy" On Their Employees
FCC Says Airwave Auction To Delay Until 2016
HP Broadens Moonshot Portfolio With Intel-powered Models
Microsoft To Keep Nokia Brand For Low-end Smartphones
LG Introduces Its First Octa-Core Application Processor
Cloud and Surface 3 Drive Microsoft's Revenue
Micron Urges Investors To Reject TRC Capital's Unsolicited Tender Offer
Facebook Returns To Chat Roots With Rooms App
Active Discussions
Copied dvd's say blank in computer only
How to generate lots of different CDs quickly
Yamaha CRW-F1UX
help questions structure DVDR
Made video, won't play back easily
Questions durability monitor LCD
Questions fungus CD/DVD Media, Some expert engineer in optical media can help me?
CD, DVD and Blu-ray burning for Android in development
 Home > News > General Computing > Pwn2Own...
Last 7 Days News : SU MO TU WE TH FR SA All News

Thursday, March 10, 2011
Pwn2Own 2011: IE8 on Windows 7, Safari Hijacked


A 64-bit Windows 7 (SP1) running Internet Explorer 8 system and Apple's Safari browser were the first "victims" at the first day of this year's CanSecWest hacker challenge held 9-11 March in Canada.

Security researcher Stephen Fewer successfully hacked into a 64-bit Windows 7 (SP1) running Internet Explorer 8, taking advantage of three different vulnerabilities. He used zero-day bugs in IE to get code execution and then chained a third vulnerability to jump out of the IE Protected Mode sandbox.

The attack also bypassed DEP (data execution prevention) and ASLR (address space layout randomization), two protection mechanisms built into Windows 7.

Fewer won a $15,000 cash prize and a new Windows laptop.

In addition, researchers from French pen-testing company VUPEN were also on hand with a fully tested exploit for IE8.

VUPEN's researchers also successfully exploited a zero-day flaw in Apple?s Safari browser. By attacking a MacBook, the researchers visited a rigged website and successfully launched a calculator on the compromised machine. The exploit bypassed ASLR (Address Space Layout Randomization) and DEP (Data Execution Prevention), two anti-exploit mitigations built into Mac OS X. The hijacked machine was running a fully patched version of Mac OS X (64-bit).

VUPEN won a $15,000 cash prize and an Apple MacBook Air 13" running Mac OS X Snow Leopard.

On the other hand, none tried to break into Google's Chrome browser. Google offered a $20,000 prize for any successful exploit.


Previous
Next
iPad 2 Arrives Tomorrow at Prices Competitors Cannot Match        All News        New Digital Cameras By Olympus
Google Tool Allows Users To Block Sites From Search Engine     General Computing News      Sony Announces Executive Appointments and Realignment of Key Businesses

Get RSS feed Easy Print E-Mail this Message

Related News
China Denies Apple's iCloud Hack Allegations
iSIGHT Discovers Windows Server Vulnerability Used in Russian Cyber-espionage Campaign
JPMorgan Hack Is Among Biggest Breaches in History
Hackers Exploit 'Shellshock' Cyber Thread
JPMorgan Servers Hacked in June
Health Data Stolen in Cyber Attack from China
Hackers Stole Over 1 Billion Records
Hackers Can Use USB Devices in Attacks
U.S. Arrests Russian Accused Of Hacking Retail Systems
Montana State Says 1.3 Million Records Exposed in Data Breach
Hackers Used YouTube To Sell Stolen Credit Card Data
Hackers Attack Dominos Pizza, Steal Customers' Data

Most Popular News
 
Home | News | All News | Reviews | Articles | Guides | Download | Expert Area | Forum | Site Info
Site best viewed at 1024x768+ - CDRINFO.COM 1998-2014 - All rights reserved -
Privacy policy - Contact Us .