Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror
DEAL: For $25 - Add A Second Phone Number To Your Smartphone for life! Use promo code SLASHDOT25. Also, Slashdot's Facebook page has a chat bot now. Message it for stories and more. Check out the new SourceForge HTML5 internet speed test! ×
Chrome

Submission + - Pwn2Own: IE, Firefox, Chrome and Java go down (net-security.org)

An anonymous reader writes: The Pwn2Own competition is underway at the CanSecWest conference in Vancouver, and during the first day of competition Java, IE 10, Firefox and Chrome were successfully "pwned" by various competitors, bringing them tens of thousands of dollars in prizes. French security firm Vupen got most of the money, as their team managed to compromise: IE 10 on Windows 8 with two zero-days and achieved a full Windows 8 compromise with sandbox bypass; Firefox 19 on Windows 7 by using a use-after-free vulnerability and a brand new technique to bypass ASLR/DEP protection on Windows 7 without the need of any ROP (Return-oriented programming); Java on Windows 7 by using a same unique heap overflow as a memory leak to bypass ASLR and as a code execution.
This discussion was created for logged-in users only, but now has been archived. No new comments can be posted.

Pwn2Own: IE, Firefox, Chrome and Java go down

Comments Filter:

Top Ten Things Overheard At The ANSI C Draft Committee Meetings: (7) Well, it's an excellent idea, but it would make the compilers too hard to write.

Working...