Pwn2Own 2014: Firefox, Internet Explorer and Safari Hacked on Day One

snoopy · Mar 14, 2014

Pwn2Own 2014: Firefox, Internet Explorer and Safari Hacked on Day One

Pwn2Own 2014, an event that takes place these days alongside CanSecWest in Vancouver, has started. On the first day, contestants already found vulnerabilities in Safari, Firefox, Internet Explorer, Adobe Flash and Reader.
The payouts made after the first day total $400,000 (€286,000). Most of the money went to French research firm VUPEN. The company’s researchers have managed to find a total of four vulnerabilities.

They found a use-after-free with an Internet Explorer sandbox bypass in Flash. The issue can be exploited to execute arbitrary code. A heap overflow and PDF sandbox escape in Adobe reader also resulted in code execution.

VUPEN experts have also found a use-after-free that can be leveraged for code execution in Firefox. In addition, they’ve managed to bypass the sandbox in Internet Explorer 11 on Windows 8.1 with a use-after-free vulnerability that causes object confusion in the broker.

For their work, VUPEN researchers have been rewarded with $300,000 (€215,000).

Researchers Jüri Aedla and Mariusz Mlynski each managed to “pwn” Firefox. Aedla found an out-of-bound read/write resulting in code execution.
Click to expand...

Details here: http://news.softpedia.com/news/Pwn2...rer-and-Safari-Hacked-on-Day-One-432001.shtml

Log in or Sign up

Pwn2Own 2014: Firefox, Internet Explorer and Safari Hacked on Day One

snoopy Registered Members

Share This Page

Log in or Sign up

Pwn2Own 2014: Firefox, Internet Explorer and Safari Hacked on Day One

snoopy Registered Members

Share This Page

Useful Searches