Two days have been past since Pwn2Own 2011 contest is live. On the first day, Hackers successfully managed to hack Apple’s Safari 5.0.3 on fully patched Mac OS X 10.6.6 and Internet Explorer 8 on Windows 7 SP1 64-bit machine.
Apple and Google released last-minute patches prior to the event. Google’s Chrome browser has been update to v10, while Apple released 50+ patches for various softwares including Safari and iOS 4.3.
Apple’s Safari was hacked by French security company Vupen who walked off with $15,000 and a new MacBook Air. They managed to exploit an unpatched vulnerability in Safari in just 5 seconds.
Meanwhile, IE8 was exploited by Stephen Fewer, who used three separate vulnerabilities to get out of Protected Mode and crack that browser’s best locks. It’s hard to exploit IE8 since Microsoft uses ASLR and a strong Sandbox. Even though, Stephen managed to hack it flawlessly.
But still, Google Chrome and Firefox have not been broken down. There’s still 1 more day remaining for the contest. Let’s see if these 2 browsers can be hacked.
{ 1 comment… read it below or add one }
Your good thinking but it looks like Chrome will escape untouched for the second year in a row.
Thank You
Daniel