Windows 7 Forums


Windows 7: iPhone, Safari, IE8, Firefox fall on day one of Pwn2Own

25 Mar 2010  
Kari

Windows 7 x64 Ultimate
12,755 posts
A Finnish immigrant in Leipzig, Germany
 
 
iPhone, Safari, IE8, Firefox fall on day one of Pwn2Own

Quote   Quote: Originally Posted by ComputerWorld
iPhone, Safari, IE8, Firefox all fall on day one of Pwn2Own

'Technically impressive' exploit of IE8 bypasses DEP, ASLR on Windows 7 at hacking contest



Hacker busts IE8 on Microsoft Windows 7 in just two minutes Dragon NaturallySpeaking 10 offers hands-off control of your computer Sprint stops ad claim of 'most dependable 3G network' after Verizon complains VMware, Citrix struggle with 'bare-metal' desktop delays Malware attack uses China World Expo guise Mozilla discloses more Firefox flaws

Computerworld - Hackers took down Apple's iPhone and Safari browser, Microsoft's Internet Explore 8 (IE8) and Mozilla's Firefox within minutes at today's Pwn2Own contest, as expected.

The two-man team of Vincenzo Iozzo and Ralf-Philipp Weinmann exploited the iPhone in under five minutes, said a spokeswoman for 3Com TippingPoint, the security company that sponsored the contest. The pair also walked away with $15,000 in cash, a record prize for the challenge, which is in its fourth year.
iPhone, Safari, IE8, Firefox all fall on day one of Pwn2Own
My System SpecsSystem Spec

25 Mar 2010  
motc7

Windows 7
380 posts
FEMA Region 6
 
 

Quote   Quote: Originally Posted by Kari View Post
Quote   Quote: Originally Posted by ComputerWorld
iPhone, Safari, IE8, Firefox all fall on day one of Pwn2Own

'Technically impressive' exploit of IE8 bypasses DEP, ASLR on Windows 7 at hacking contest

Hacker busts IE8 on Microsoft Windows 7 in just two minutes Dragon NaturallySpeaking 10 offers hands-off control of your computer Sprint stops ad claim of 'most dependable 3G network' after Verizon complains VMware, Citrix struggle with 'bare-metal' desktop delays Malware attack uses China World Expo guise Mozilla discloses more Firefox flaws

Computerworld - Hackers took down Apple's iPhone and Safari browser, Microsoft's Internet Explore 8 (IE8) and Mozilla's Firefox within minutes at today's Pwn2Own contest, as expected.

The two-man team of Vincenzo Iozzo and Ralf-Philipp Weinmann exploited the iPhone in under five minutes, said a spokeswoman for 3Com TippingPoint, the security company that sponsored the contest. The pair also walked away with $15,000 in cash, a record prize for the challenge, which is in its fourth year.
iPhone, Safari, IE8, Firefox all fall on day one of Pwn2Own
Hack an iPhone? There's an app for that.
My System SpecsSystem Spec
25 Mar 2010  
tw33k

Windows 7 Ultimate (x64) SP1
3,260 posts
 
 

Here's a link to Peter Vreugdenhil's exploits. Not a specific "How to" guide before anyone gets overly excited. It's very interesting none-the-less and it only took him 2 minutes!
My System SpecsSystem Spec
.


25 Mar 2010  
Kari

Windows 7 x64 Ultimate
12,755 posts
A Finnish immigrant in Leipzig, Germany
 
 

That was an interesting read! Printing it out now. Thanks, tw33k.
My System SpecsSystem Spec
25 Mar 2010  
tw33k

Windows 7 Ultimate (x64) SP1
3,260 posts
 
 

More than welcome my friend
My System SpecsSystem Spec
26 Mar 2010  
kookster

Windows 7 64-bit Windows 7 32-bit
156 posts
Silicon Valley
 
 

Man most of that was like gibberish to me, but it was still cool to read.
My System SpecsSystem Spec
26 Mar 2010  
Kari

Windows 7 x64 Ultimate
12,755 posts
A Finnish immigrant in Leipzig, Germany
 
 

Quote   Quote: Originally Posted by kookster View Post
Man most of that was like gibberish to me, but it was still cool to read.
To put it very simple, he found a way to avoid DEP, thus letting him to execute code where it's normally not possible.

A clear vulnerability. He deserved his price.

Kari
My System SpecsSystem Spec
26 Mar 2010  
Kari

Windows 7 x64 Ultimate
12,755 posts
A Finnish immigrant in Leipzig, Germany
 
 



Notice that although he can run an app (Calculator), the IE crashes at the same moment the app is launched.
My System SpecsSystem Spec
26 Mar 2010  
Product FRED

Windows 7 Enterprise 64-bit
1,132 posts
Brooklyn, NY
 
 

Woops, I'll just delete my post then. It's because ]YOUTUBE was at the end of the URL.
My System SpecsSystem Spec
26 Mar 2010  
CarlTR6

Windows 7 Ultimate 32 bit
12,883 posts
Orlando, Florida
 
 

It just goes to show that nothing is really secure.
My System SpecsSystem Spec
Reply

 iPhone, Safari, IE8, Firefox fall on day one of Pwn2Own problems?



Thread Tools



Similar help and support threads for: iPhone, Safari, IE8, Firefox fall on day one of Pwn2Own
Thread Forum
IE and Safari out at Pwn2Own on day 1 News
IE9 vs. Chrome 8.0, Firefox 4.0, Opera 10.6, Safari 5.0 – Performance News
firefox 64 bit or safari 64 bit Browsers & Mail
IE9 vs. Firefox 3.6.3, Chrome 4.1, Opera 10.52, Safari Browsers & Mail
IE8 Superior to Chrome 4,Firefox 3.5,Opera 10 & Safari. Browsers & Mail


All times are GMT -5. The time now is 04:23 AM.



Windows 7 Forums is an independent web site and has not been authorized,
sponsored, or otherwise approved by Microsoft Corporation.
"Windows 7" and related materials are trademarks of Microsoft Corp.
© Designer Media Ltd