| Windows 7: iPhone, Safari, IE8, Firefox fall on day one of Pwn2Own |
25 Mar 2010
|
| | Windows 7 x64 Ultimate 12,755 posts A Finnish immigrant in Leipzig, Germany |
iPhone, Safari, IE8, Firefox fall on day one of Pwn2Own 
Quote: Originally Posted by ComputerWorld iPhone, Safari, IE8, Firefox all fall on day one of Pwn2Own
'Technically impressive' exploit of IE8 bypasses DEP, ASLR on Windows 7 at hacking contest
Hacker busts IE8 on Microsoft Windows 7 in just two minutes Dragon NaturallySpeaking 10 offers hands-off control of your computer Sprint stops ad claim of 'most dependable 3G network' after Verizon complains VMware, Citrix struggle with 'bare-metal' desktop delays Malware attack uses China World Expo guise Mozilla discloses more Firefox flaws
Computerworld - Hackers took down Apple's iPhone and Safari browser, Microsoft's Internet Explore 8 (IE8) and Mozilla's Firefox within minutes at today's Pwn2Own contest, as expected.
The two-man team of Vincenzo Iozzo and Ralf-Philipp Weinmann exploited the iPhone in under five minutes, said a spokeswoman for 3Com TippingPoint, the security company that sponsored the contest. The pair also walked away with $15,000 in cash, a record prize for the challenge, which is in its fourth year. iPhone, Safari, IE8, Firefox all fall on day one of Pwn2Own | My System Specs |
| Computer type Laptop System Manufacturer/Model Number HP ENVY 17-1150eg OS Windows 7 x64 Ultimate CPU 1.6 GHz Intel Core i7-720QM Processor Memory 6 GB Graphics Card ATI Mobility Radeon HD 5850 Graphics Sound Card Beats sound system with integrated subwoofer Monitor(s) Displays 17" laptop display, 22" LCD and 32" Full HD TV through HDMI Screen Resolution 1600*900, 1680*1050 and 1920*1080 Keyboard Logitech diNovo Media Desktop Laser (bluetooth) Mouse Logitech MX1000 Laser (Bluetooth) Hard Drives Internal: 2 x 500 GB SATA Hard Disk Drive 7200 rpm
External: 2TB for backups, 3TB USB3 network drive for media Internet Speed 50/10 Mbps VDSL Antivirus MSE, Windows Defender Browser Maxthon 3.5.2. Other Info Windows 7 Ultimate Retail Full in English, additional Guest-user accounts in Finnish, German and Swedish (Working languages English & Swedish, Family language German, my own language, mother tongue, Finnish. I really need Ultimate to get to use Language Packs!) |
25 Mar 2010
|
| | Windows 7 380 posts FEMA Region 6 |

Quote: Originally Posted by Kari 
Quote: Originally Posted by ComputerWorld iPhone, Safari, IE8, Firefox all fall on day one of Pwn2Own
'Technically impressive' exploit of IE8 bypasses DEP, ASLR on Windows 7 at hacking contest
Hacker busts IE8 on Microsoft Windows 7 in just two minutes Dragon NaturallySpeaking 10 offers hands-off control of your computer Sprint stops ad claim of 'most dependable 3G network' after Verizon complains VMware, Citrix struggle with 'bare-metal' desktop delays Malware attack uses China World Expo guise Mozilla discloses more Firefox flaws
Computerworld - Hackers took down Apple's iPhone and Safari browser, Microsoft's Internet Explore 8 (IE8) and Mozilla's Firefox within minutes at today's Pwn2Own contest, as expected.
The two-man team of Vincenzo Iozzo and Ralf-Philipp Weinmann exploited the iPhone in under five minutes, said a spokeswoman for 3Com TippingPoint, the security company that sponsored the contest. The pair also walked away with $15,000 in cash, a record prize for the challenge, which is in its fourth year. iPhone, Safari, IE8, Firefox all fall on day one of Pwn2Own Hack an iPhone? There's an app for that. | My System Specs | | System Manufacturer/Model Number HP Pavilion dv7 OS Windows 7 CPU Core i7 Memory 8 GB Graphics Card ATI FireGL Monitor(s) Displays Secondary is an HP L1940T Screen Resolution 1680x1050 Keyboard G11 Logitech Mouse G7 Logitech Hard Drives 160 GB SSD and 500 GB SATA Internet Speed Fiber Other Info My rig smegging rules! |
25 Mar 2010
|
| | Windows 7 Ultimate (x64) SP1 3,260 posts |
Here's a link to Peter Vreugdenhil's exploits. Not a specific "How to" guide before anyone gets overly excited. It's very interesting none-the-less and it only took him 2 minutes! | My System Specs | | System Manufacturer/Model Number tw33k OS Windows 7 Ultimate (x64) SP1 CPU Intel 3770k 4.6GHz Motherboard ASUS Maximus V Formula Memory 8GB (2x 4GB) Crucial Ballistix Graphics Card Sapphire 7950 (1060/1600) Sound Card On Board Realtek HD Audio Monitor(s) Displays 27" Acer B273HU (via HDMI) Screen Resolution 2048 x 1152 Keyboard Microsoft Wireless 5000 Mouse Microsoft Wireless 5000 PSU Corsair AX750 Gold Case Corsair Obsidian 800DW Cooling Corsair H100 (2x AP-121/2x UK-3000 push/pull) Hard Drives Crucial M4 128GB
2TB WD Black
1TB Samsung F3 SATA
1TB WD Elite External
2TB WD USB 3.0 Internet Speed 5mb/s Other Info Logitech z-2300 2.1 speakers
Lamptron FC-5 v2 |
25 Mar 2010
|
| | Windows 7 x64 Ultimate 12,755 posts A Finnish immigrant in Leipzig, Germany |
That was an interesting read! Printing it out now. Thanks, tw33k. | My System Specs | | Computer type Laptop System Manufacturer/Model Number HP ENVY 17-1150eg OS Windows 7 x64 Ultimate CPU 1.6 GHz Intel Core i7-720QM Processor Memory 6 GB Graphics Card ATI Mobility Radeon HD 5850 Graphics Sound Card Beats sound system with integrated subwoofer Monitor(s) Displays 17" laptop display, 22" LCD and 32" Full HD TV through HDMI Screen Resolution 1600*900, 1680*1050 and 1920*1080 Keyboard Logitech diNovo Media Desktop Laser (bluetooth) Mouse Logitech MX1000 Laser (Bluetooth) Hard Drives Internal: 2 x 500 GB SATA Hard Disk Drive 7200 rpm
External: 2TB for backups, 3TB USB3 network drive for media Internet Speed 50/10 Mbps VDSL Antivirus MSE, Windows Defender Browser Maxthon 3.5.2. Other Info Windows 7 Ultimate Retail Full in English, additional Guest-user accounts in Finnish, German and Swedish (Working languages English & Swedish, Family language German, my own language, mother tongue, Finnish. I really need Ultimate to get to use Language Packs!) |
25 Mar 2010
|
| | Windows 7 Ultimate (x64) SP1 3,260 posts |
More than welcome my friend | My System Specs | | System Manufacturer/Model Number tw33k OS Windows 7 Ultimate (x64) SP1 CPU Intel 3770k 4.6GHz Motherboard ASUS Maximus V Formula Memory 8GB (2x 4GB) Crucial Ballistix Graphics Card Sapphire 7950 (1060/1600) Sound Card On Board Realtek HD Audio Monitor(s) Displays 27" Acer B273HU (via HDMI) Screen Resolution 2048 x 1152 Keyboard Microsoft Wireless 5000 Mouse Microsoft Wireless 5000 PSU Corsair AX750 Gold Case Corsair Obsidian 800DW Cooling Corsair H100 (2x AP-121/2x UK-3000 push/pull) Hard Drives Crucial M4 128GB
2TB WD Black
1TB Samsung F3 SATA
1TB WD Elite External
2TB WD USB 3.0 Internet Speed 5mb/s Other Info Logitech z-2300 2.1 speakers
Lamptron FC-5 v2 |
26 Mar 2010
|
| | Windows 7 64-bit Windows 7 32-bit 156 posts Silicon Valley |
Man most of that was like gibberish to me, but it was still cool to read. | My System Specs | | System Manufacturer/Model Number acer timeline 3810t OS Windows 7 64-bit Windows 7 32-bit CPU Intel Core 2 Solo (1.4 GHz) Memory 4 GB DDR3 SDRAM - 1066 MHz SO DIMM 204-pin Graphics Card Intel GMA 4500MHD Dynamic Video Memory Technology 5.0 Monitor(s) Displays Widescreen 13.3 in TFT active matrix Case # Ultraportable (Under 4 lbs.) , Budget Hard Drives # 250 GB - Serial ATA-150 - 5400 rpm |
26 Mar 2010
|
| | Windows 7 x64 Ultimate 12,755 posts A Finnish immigrant in Leipzig, Germany |

Quote: Originally Posted by kookster Man most of that was like gibberish to me, but it was still cool to read. To put it very simple, he found a way to avoid DEP, thus letting him to execute code where it's normally not possible.
A clear vulnerability. He deserved his price.
Kari | My System Specs | | Computer type Laptop System Manufacturer/Model Number HP ENVY 17-1150eg OS Windows 7 x64 Ultimate CPU 1.6 GHz Intel Core i7-720QM Processor Memory 6 GB Graphics Card ATI Mobility Radeon HD 5850 Graphics Sound Card Beats sound system with integrated subwoofer Monitor(s) Displays 17" laptop display, 22" LCD and 32" Full HD TV through HDMI Screen Resolution 1600*900, 1680*1050 and 1920*1080 Keyboard Logitech diNovo Media Desktop Laser (bluetooth) Mouse Logitech MX1000 Laser (Bluetooth) Hard Drives Internal: 2 x 500 GB SATA Hard Disk Drive 7200 rpm
External: 2TB for backups, 3TB USB3 network drive for media Internet Speed 50/10 Mbps VDSL Antivirus MSE, Windows Defender Browser Maxthon 3.5.2. Other Info Windows 7 Ultimate Retail Full in English, additional Guest-user accounts in Finnish, German and Swedish (Working languages English & Swedish, Family language German, my own language, mother tongue, Finnish. I really need Ultimate to get to use Language Packs!) |
26 Mar 2010
|
| | Windows 7 x64 Ultimate 12,755 posts A Finnish immigrant in Leipzig, Germany |
Notice that although he can run an app (Calculator), the IE crashes at the same moment the app is launched. | My System Specs | | Computer type Laptop System Manufacturer/Model Number HP ENVY 17-1150eg OS Windows 7 x64 Ultimate CPU 1.6 GHz Intel Core i7-720QM Processor Memory 6 GB Graphics Card ATI Mobility Radeon HD 5850 Graphics Sound Card Beats sound system with integrated subwoofer Monitor(s) Displays 17" laptop display, 22" LCD and 32" Full HD TV through HDMI Screen Resolution 1600*900, 1680*1050 and 1920*1080 Keyboard Logitech diNovo Media Desktop Laser (bluetooth) Mouse Logitech MX1000 Laser (Bluetooth) Hard Drives Internal: 2 x 500 GB SATA Hard Disk Drive 7200 rpm
External: 2TB for backups, 3TB USB3 network drive for media Internet Speed 50/10 Mbps VDSL Antivirus MSE, Windows Defender Browser Maxthon 3.5.2. Other Info Windows 7 Ultimate Retail Full in English, additional Guest-user accounts in Finnish, German and Swedish (Working languages English & Swedish, Family language German, my own language, mother tongue, Finnish. I really need Ultimate to get to use Language Packs!) |
26 Mar 2010
|
| | Windows 7 Enterprise 64-bit 1,132 posts Brooklyn, NY |
Woops, I'll just delete my post then. It's because ]YOUTUBE was at the end of the URL. | My System Specs | | OS Windows 7 Enterprise 64-bit CPU AMD Phenom II X4 3.0GHz Motherboard ASUS M5A97 Memory 8GB G-Skill Ripjaws DDR3 1333 Graphics Card PNY GeForce 460 GTX 1GB OC - Enthusiast Edition Sound Card VIA High Definition Audio Monitor(s) Displays Dell 19" Screen Resolution 1280x1024 Keyboard Microsoft Wireless Keyboard 2000 Mouse Microsoft Wireless Mouse 2000 PSU OCZ Fata1ty 700W Modular PSU Case ASUS Hard Drives 1TB - Primary
160GB - Secondary
250GB - External backup for important files Internet Speed 3 Mbps/768 kbps |
26 Mar 2010
|
| | Windows 7 Ultimate 32 bit 12,883 posts Orlando, Florida |
It just goes to show that nothing is really secure. | My System Specs | | System Manufacturer/Model Number Home built OS Windows 7 Ultimate 32 bit CPU Intel(R) Pentium(R) 4 CPU 3.00GHz Motherboard ASUS P4P800-VM Motherboard Chipset: Intel 865G + ICH5 Memory 2.50 GB RAM Graphics Card NVIDIA GeForce 7600 GS Sound Card SoundMax Integrated Digital Audio (Chip) Monitor(s) Displays ViewSonic VX 1962 wm Screen Resolution 1680 X 1050 Keyboard Microsoft Comfort Curve Keyboard 2000 v10 USB Mouse Logitec optic USB Cooling Fan based Hard Drives Seagate Barracuda 7200.10 80 GB
ST380215A ATA Device 18.6 GB
Western Digital "My Book" external hard drive 750 GB Internet Speed 3.01 Mb/s download 0.64 Mb/s upload iPhone, Safari, IE8, Firefox fall on day one of Pwn2Own problems? |
Similar help and support threads for: iPhone, Safari, IE8, Firefox fall on day one of Pwn2Own
| | Thread | Forum | | IE and Safari out at Pwn2Own on day 1 | News | | IE9 vs. Chrome 8.0, Firefox 4.0, Opera 10.6, Safari 5.0 – Performance | News | | firefox 64 bit or safari 64 bit | Browsers & Mail | | IE9 vs. Firefox 3.6.3, Chrome 4.1, Opera 10.52, Safari | Browsers & Mail | | IE8 Superior to Chrome 4,Firefox 3.5,Opera 10 & Safari. | Browsers & Mail | All times are GMT -5. The time now is 04:23 AM. | |