Thursday, March 22, 2018
Submit your own News for
inclusion in our Site.
Click here...
Breaking News
New Samsung Exynos 7 Series 9610 Mobile Processor focuses on Multimedia
Google to Develop Its Own Blockchain-Related Technology
Zuckerberg Apologizes For Cambridge Analytica Scandal, Outlines Steps to Protect Users' Data
Mediatek Says There Are No Talks With Broadcom
Seagate Says Its MACH.2 Multi Actuator Technology Breaks Throughput Record, Announces HAMR Reliability Tests
New Apple Watch Bands Feature Spring Colors and Styles
European Commission Proposes Measures to Ensure Companies Pay Fair Tax in the EU
VIVE FOCUS Coming To International Markets Later This Year
Active Discussions
Which of these DVD media are the best, most durable?
How to back up a PS2 DL game
Copy a protected DVD?
roxio issues with xp pro
Help make DVDInfoPro better with dvdinfomantis!!!
menu making
Optiarc AD-7260S review
cdrw trouble
 Home > News > General Computing > IE, Fir...
Last 7 Days News : SU MO TU WE TH FR SA All News

Thursday, March 07, 2013
IE, Firefox, Chrome and Java "Pwned"

Java, IE 10, Firefox and Chrome went down by various competitors during the first day of the Pwn2Own competition held at the CanSecWest conference in Vancouver.

The basic winner is french security firm Vupen. Their team successfuly compromised IE 10 on Windows 8 with two zero-days and achieved a full Windows 8 compromise with sandbox bypass; Firefox 19 on Windows 7 by using a use-after-free vulnerability and a brand new technique to bypass ASLR/DEP protection on Windows 7 without the need of any ROP (Return-oriented programming); Java 7 on Windows 7 by using a same unique heap overflow as a memory leak to bypass ASLR and as a code execution.

Oracle's Java was also "hit" by researcher James Forshaw and Accuvant LABS security research scientist Joshua Drake.

Researchers Jon Butler and Nils from UK-based MWR Labs managed to exploit the latest stable Google Chrome version on Windows 7 and then used a kernel bug to bypass the sandbox. The researchers showed an exploit against previously undiscovered vulnerabilities in Google Chrome running on a modern Windows-based laptop. By visiting a malicious webpage, it was possible to exploit a vulnerability which allowed them to gain code execution in the context of the sandboxed renderer process. The researchers also used a kernel vulnerability in the underlying operating system in order to gain elevated privileges and to execute arbitrary commands outside of the sandbox with system privileges.

In the second day of the contest, Vupen is scheduled to take on Flash, Pharm Toan will take a stab at IE 10, and George Hotz will be hitting Adobe Reader.

New Studio Partnerships For NOOK Video        All News        Samsung To Stop Windows RT-based Selling Ativ Tab Tablets in Europe
New Studio Partnerships For NOOK Video     General Computing News      Google Transparency Report Unveils FBI's Eye On The Web

Get RSS feed Easy Print E-Mail this Message

Related News
New Apple Watch Bands Feature Spring Colors and Styles
GLOBALFOUNDRIES Launches RF Ecosystem Program to Accelerate the Release of Wireless Connectivity, Radar and 5G Applications
GLOBALFOUNDRIES Extends Silicon Photonics Roadmap to Meet Demand for Datacenter Connectivity
Lenovo Debuts Ruggedized Chromebook Trio and New Lenovo Yoga 730 and 530 ab MWC
How Chrome's ad Filtering Works
U.S. and UK Government Websites Carried Crypto-mining Malware: report
Hackers Attacked PyeongChang 2018 Winter Olympic Games
Google Announces New Chromebooks for Learners
Latest Firefox Quantum Release Brings Faster, Always-on Privacy With opt-in Tracking Protection
Acer Showcases New Chromebooks And Chromebox Devices
Intel Has to Deal With New Security Issue in Laptops
Is Your Chromebook Vulnerable to Meltdown? Find out Here

Most Popular News
Home | News | All News | Reviews | Articles | Guides | Download | Expert Area | Forum | Site Info
Site best viewed at 1024x768+ - CDRINFO.COM 1998-2018 - All rights reserved -
Privacy policy - Contact Us .