Tuesday, September 30, 2014
Search
  
Submit your own News for
inclusion in our Site.
Click here...
Breaking News
Microsoft Previews Windows 10
Google Offers Unlimited Cloud Storage To Students
Gionee Announced The World's Thinnest Smartphone
MPEG LA Rolls Out HEVC License
PayPal To Become An Independent Publicly Traded Company in 2015
AMD To Showcase ARM Cortex-A57-Based Hadoop on Opteron Processors
SanDisk Introduces New X300 SSD And Client SSD Upgrade Service For Corporate Environments
TSMC and ARM Announce 16nm FinFET Silicon with 64-bit ARM big.LITTLE Technology
Active Discussions
Yamaha CRW-F1UX
help questions structure DVDR
Made video, won't play back easily
Questions durability monitor LCD
Questions fungus CD/DVD Media, Some expert engineer in optical media can help me?
CD, DVD and Blu-ray burning for Android in development
IBM supercharges Power servers with graphics chips
Werner Vogels: four cloud computing trends for 2014
 Home > News > General Computing > IE, Fir...
Last 7 Days News : SU MO TU WE TH FR SA All News

Thursday, March 07, 2013
IE, Firefox, Chrome and Java "Pwned"


Java, IE 10, Firefox and Chrome went down by various competitors during the first day of the Pwn2Own competition held at the CanSecWest conference in Vancouver.

The basic winner is french security firm Vupen. Their team successfuly compromised IE 10 on Windows 8 with two zero-days and achieved a full Windows 8 compromise with sandbox bypass; Firefox 19 on Windows 7 by using a use-after-free vulnerability and a brand new technique to bypass ASLR/DEP protection on Windows 7 without the need of any ROP (Return-oriented programming); Java 7 on Windows 7 by using a same unique heap overflow as a memory leak to bypass ASLR and as a code execution.

Oracle's Java was also "hit" by researcher James Forshaw and Accuvant LABS security research scientist Joshua Drake.

Researchers Jon Butler and Nils from UK-based MWR Labs managed to exploit the latest stable Google Chrome version on Windows 7 and then used a kernel bug to bypass the sandbox. The researchers showed an exploit against previously undiscovered vulnerabilities in Google Chrome running on a modern Windows-based laptop. By visiting a malicious webpage, it was possible to exploit a vulnerability which allowed them to gain code execution in the context of the sandboxed renderer process. The researchers also used a kernel vulnerability in the underlying operating system in order to gain elevated privileges and to execute arbitrary commands outside of the sandbox with system privileges.

In the second day of the contest, Vupen is scheduled to take on Flash, Pharm Toan will take a stab at IE 10, and George Hotz will be hitting Adobe Reader.


Previous
Next
New Studio Partnerships For NOOK Video        All News        Samsung To Stop Windows RT-based Selling Ativ Tab Tablets in Europe
New Studio Partnerships For NOOK Video     General Computing News      Google Transparency Report Unveils FBI's Eye On The Web

Get RSS feed Easy Print E-Mail this Message

Related News
Hackers Exploit 'Shellshock' Cyber Thread
Nvidia SHIELD Tablet Gets 32GB Storage and 4G LTE
JPMorgan Servers Hacked in June
First Android Apps Coming to Chromebooks
LaCie d2 Thunderbolt 2 Features New Design and SSD Upgrade
LaCie Ships the 48 TB Thunderbolt 2 Storage Solution
Acer Unveils New Chromebox CXI and Chromebook 11
Health Data Stolen in Cyber Attack from China
Gartner Says Chromebook Sales Will Reach 5.2 Million Units in 2014
Acer Launches NVIDIA Tegra K1-Powered 13.3-Inch Chromebook
IE To block Outdated Java Plug-ins
Hackers Stole Over 1 Billion Records

Most Popular News
 
Home | News | All News | Reviews | Articles | Guides | Download | Expert Area | Forum | Site Info
Site best viewed at 1024x768+ - CDRINFO.COM 1998-2014 - All rights reserved -
Privacy policy - Contact Us .