Memory corruption

Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that 1 was not properly initialized or 2 is deleted, as demonstrated by Stephen Fewer as the first of three chained vulnerabilities...

CVE-2011-1344

Use-after-free vulnerability in WebKit, as used in Apple Safari before 5.0.5; iOS before 4.3.2 for iPhone, iPod, and iPad; iOS before 4.2.7 for iPhone 4 CDMA; and possibly other products allows remote attackers to execute arbitrary code by adding children to a WBR tag and then removing the tag,...

UBUNTU-CVE-2011-1344

Use-after-free vulnerability in WebKit, as used in Apple Safari before 5.0.5; iOS before 4.3.2 for iPhone, iPod, and iPad; iOS before 4.2.7 for iPhone 4 CDMA; and possibly other products allows remote attackers to execute arbitrary code by adding children to a WBR tag and then removing the tag,...

CVE-2011-1346

CVE-2011-1346 : In Microsoft Internet Explorer 8 on Windows 7, an uninitialized variable information leak in IE (when creating a new Option element) can disclose memory layout, potentially defeating ASLR and aiding remote code execution as part of the Pwn2Own 2011 chain. Exploitation requires vis...

CVE-2011-1344

Use-after-free vulnerability in WebKit, as used in Apple Safari before 5.0.5; iOS before 4.3.2 for iPhone, iPod, and iPad; iOS before 4.2.7 for iPhone 4 CDMA; and possibly other products allows remote attackers to execute arbitrary code by adding children to a WBR tag and then removing the tag,...

CVE-2011-1347

Microsoft Internet Explorer 8 on Windows 7 is affected by a Protected Mode bypass vulnerability (CVE-2011-1347) that allowed an attacker to create arbitrary files by leveraging access to a Low integrity process, demonstrated during Pwn2Own 2011 by Stephen Fewer as the third of three chained vulne...

CVE-2011-1344

CVE-2011-1344 is a use-after-free vulnerability in WebKit that enables remote code execution via crafted DOM manipulation (adding then removing a WBR tag), as demonstrated during Pwn2Own. Affected products include Apple Safari prior to 5.0.5 and iOS prior to 4.3.2 (iPhone, iPod, iPad) and iOS pri...

Stephen Fewer won Pwn2Own !

Stephen Fewer won Pwn2Own ! The annual Pwn2Own contest at the CanSecWest conference kicked off Wednesday and one of the winners this year was Stephen Fewer, who exploited Internet Explorer 8 on Windows 7. Dennis Fisher spoke with him about the contest, the challenge of attacking IE 8 and the...

Pwn2Own Winner Stephen Fewer

The annual Pwn2Own contest at the CanSecWest conference kicked off Wednesday and one of the winners this year was Stephen Fewer, who exploited Internet Explorer 8 on Windows 7. Dennis Fisher spoke with him about the contest, the challenge of attacking IE 8 and the utility of memory protections...

Internet Explorer and Safari first to fall at Pwn2Own 2011, Chrome and Firefox still standing !

Pwn2Own, the annual three-day browser hackathon, has already claimed its first two victims: IE8 on Windows 7 64-bit, and Safari 5 on Mac OS X. Google Chrome looks set to survive for its third year in a row. Internet Explorer 8 was thoroughly destroyed by independent researcher Stephen Fewer. "He...

Apple Safari and Internet Explorer 8 Go Down at Pwn2Own, iPhone Up Next

VANCOUVER–On the first day of the Pwn2Own contest here, contestants were able to take down both Safari on Mac OS X and Internet Explorer 8 on Windows 7. None of the researchers decided to try their hand against Google Chrome, however, so that browser was the only one still standing after day one...

PT-2011-3075 · Apple +1 · Ios +3

Name of the Vulnerable Software and Affected Versions: Apple Safari versions prior to 5.0.5 iOS versions prior to 4.3.2 for iPhone, iPod, and iPad iOS versions prior to 4.2.7 for iPhone 4 CDMA Description: The issue allows remote attackers to execute arbitrary code by exploiting a use-after-free...

Why Pwn2Own Is What's Right With Security

VANCOUVER — When the Pwn2Own contest began in 2007, it was dismissed by some in the industry as nothing more than a publicity stunt meant to inflate the egos of researchers while embarrassing software vendors. But as the fifth edition of the hacker challenge gets underway at the CanSecWest...

Apple Taps Security Experts Ahead Of Lion OS Release

Apple is distributing copies of its yet unreleased OS X 10.7 Lion operating system to a handful of security experts, including former Pwn2Own winner, Charlie Miller, who claims this is the first time Apple has taken such actions, according to a report from PC World. The move, believed to be a fir...

Geohot Will Try His Hacking Skills On Windows Phone 7 !

Geohot has been causing quite a disturbance due to his ongoing legal battle with Sony. Geohot jailbroke the Sony PS3 to run unsigned code. Sony is now suing him, and Geohot is under the tech industry's spotlight more than ever. So, what does all this have to do with Windows Phone 7? Microsoft has...

Microsoft Releases Zero IE8 Security Updates Before "Pwn2Own" !

Microsoft has opted not to release any patches to its Internet Explorer 8 browser prior to this year's Pwn2Own browser exploit challenge, which is set to run from March 9 to March 11 at the CanSecWest security conference. There's been no indication as to why Microsoft's not making one last effort...

Google & Mozilla Patches Browsers Before Pwn2Own Hacker Contest !

Now that the annual Pwn2Own hacking contest is around the corner, both Google and Mozilla are busy patching flaws in their respective browsers to appear competent in the contest. Both internet giants have reportedly updated their browsers for the contest that is due to take place next week at the...

Google Bets $20k Against the Field at 2011 Pwn2Own

Google has announced plans to pay $20,000 to anyone who can successfully exploit a vulnerability in their Chrome browser and infiltrate a Cr-48 Chrome Notebook. Google’ is offering the cash prize as part of Zero Day Initiative’s Pwn2POwn contest which will be taking place March 9-11 during the 20...

Google bets $20000 that Chrome browser can not be hacked !

Google will pay $ 20,000 for the first scientist who succeeds in its Chrome browser to exploit this year's competition Pwn2Own piracy. The price is the largest ever to face the annual challenge, which begins for the fifth time in the CanSecWest security conference in Vancouver, British Columbia,...

Microsoft Internet Explorer MSADO CacheSize Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. This vulnerability was submitted to the ZDI via at the annual Pwn2Own competition at CanSecWest. User interaction is required to exploit this vulnerability in that the...