Breaking News

Time to Walk: An inspiring audio walking experience comes to Apple Fitness+ Galaxy Tab S7 & S7+ Users Can Enjoy More Streamlined Galaxy Ecosystem Experiences with One UI 3 Update, Starting Today IIYAMA INTRODUCES TWO NEW G-MASTERS RED EAGLE #MONITORS4GAMERS: A 24’’ GB2470HSU AND A 27’’ GB2770HSU Samsung Display to Introduce First 90Hz OLED Laptop Display addlink launch P20 Portable SSD speed of up to 1050MB/s

logo

  • Share Us
    • Facebook
    • Twitter
  • Home
  • Home
  • News
  • Reviews
  • Forum
  • Legacy
  • About
    • Submit News

    • Contact Us
    • Privacy

    • Promotion
    • Advertise

    • RSS Feed
    • Site Map

Search form

IE, Firefox, Chrome and Java "Pwned"

IE, Firefox, Chrome and Java "Pwned"

Enterprise & IT Mar 7,2013 0

Java, IE 10, Firefox and Chrome went down by various competitors during the first day of the Pwn2Own competition held at the CanSecWest conference in Vancouver. The basic winner is french security firm Vupen. Their team successfuly compromised IE 10 on Windows 8 with two zero-days and achieved a full Windows 8 compromise with sandbox bypass; Firefox 19 on Windows 7 by using a use-after-free vulnerability and a brand new technique to bypass ASLR/DEP protection on Windows 7 without the need of any ROP (Return-oriented programming); Java 7 on Windows 7 by using a same unique heap overflow as a memory leak to bypass ASLR and as a code execution.

Oracle's Java was also "hit" by researcher James Forshaw and Accuvant LABS security research scientist Joshua Drake.

Researchers Jon Butler and Nils from UK-based MWR Labs managed to exploit the latest stable Google Chrome version on Windows 7 and then used a kernel bug to bypass the sandbox. The researchers showed an exploit against previously undiscovered vulnerabilities in Google Chrome running on a modern Windows-based laptop. By visiting a malicious webpage, it was possible to exploit a vulnerability which allowed them to gain code execution in the context of the sandboxed renderer process. The researchers also used a kernel vulnerability in the underlying operating system in order to gain elevated privileges and to execute arbitrary commands outside of the sandbox with system privileges.

In the second day of the contest, Vupen is scheduled to take on Flash, Pharm Toan will take a stab at IE 10, and George Hotz will be hitting Adobe Reader.

Tags: Hackinginternet explorerFirefoxChrome browser
Previous Post
New Studio Partnerships For NOOK Video
Next Post
Samsung To Stop Windows RT-based Selling Ativ Tab Tablets in Europe

Related Posts

  • Google Adds More Intuitive Privacy and Security Controls in Chrome

  • European Supercomputers Researching Covid-19 Report Hacking Attacks

  • Microsoft Offers You $100,000 If You Can Hack the Linux-based Azure Sphere

  • Latest Firefox Helps You Keep Your Passwords Safe

  • Zoom Users' Data have Been on Sale on Dark Web: report

  • Indonesia's Tokopedia Inverstigates Alleged Data Leak of 91 Million Users

  • Nintendo Says 160,000 Accounts Have Been Hacked

  • Latest Firefox Updates Address Bar For Easier Search

Latest News

Time to Walk: An inspiring audio walking experience comes to Apple Fitness+
Consumer Electronics

Time to Walk: An inspiring audio walking experience comes to Apple Fitness+

Galaxy Tab S7 & S7+ Users Can Enjoy More Streamlined Galaxy Ecosystem Experiences with One UI 3 Update, Starting Today
Consumer Electronics

Galaxy Tab S7 & S7+ Users Can Enjoy More Streamlined Galaxy Ecosystem Experiences with One UI 3 Update, Starting Today

IIYAMA INTRODUCES TWO NEW G-MASTERS RED EAGLE #MONITORS4GAMERS: A 24’’ GB2470HSU AND A 27’’ GB2770HSU
PC components

IIYAMA INTRODUCES TWO NEW G-MASTERS RED EAGLE #MONITORS4GAMERS: A 24’’ GB2470HSU AND A 27’’ GB2770HSU

Samsung Display to Introduce First 90Hz OLED Laptop Display
Enterprise & IT

Samsung Display to Introduce First 90Hz OLED Laptop Display

addlink launch P20 Portable SSD speed of up to 1050MB/s
PC components

addlink launch P20 Portable SSD speed of up to 1050MB/s

Popular Reviews

CeBIT 2005

CeBIT 2005

Zidoo Z9S 4K Media Player review

Zidoo Z9S 4K Media Player review

CeBIT 2006

CeBIT 2006

LiteOn iHBS112 review

LiteOn iHBS112 review

Club3D HD3850

Club3D HD3850

Crucial P1 NVMe 1TB SSD review

Crucial P1 NVMe 1TB SSD review

Toshiba Exceria M303 64GB and M501 Exceria Pro 64GB MicroSDXC review

Toshiba Exceria M303 64GB and M501 Exceria Pro 64GB MicroSDXC review

Hitachi DZ-MV100A DVD Camcorder

Hitachi DZ-MV100A DVD Camcorder

  • Home
  • News
  • Reviews
  • Forum
  • Legacy
  • About
    • Submit News

    • Contact Us
    • Privacy

    • Promotion
    • Advertise

    • RSS Feed
    • Site Map
  • About
  • Privacy
  • Contact Us
  • Promotional Opportunities @ CdrInfo.com
  • Advertise on out site
  • Submit your News to our site
  • RSS Feed