Monday, March 14, 2011

Google patched WebKit vulnerability discovered at Pwn2Own

At the annual, Pwn2Own hacking contest, three researchers- Vincenzo Iozzo, Willem Pinckaers and Ralf Philipp Weinmann stole the spotlight by hacking the browser of BlacBerry Torch 9800 smartphone by exploiting multiple WebKit vulnerabilities.

The hackers “chained an information disclosure bug to a separate integer overflow flaw” and then stole the contact list and image data base.

On March 11, 2011, Google patched the WebKit flaw in its Chrome browser making it the first patch ever released by a browser developer to cover up a vulnerability discovered at the Pwn2Own hacking contest. Google rated the threat "high" and made sure that outsiders do not have access to the details of the vulnerability.

Sponsored by HP TippingPoint and its Zero Day Initiative bug bounty program, Pwn2Own started on March 9, 2011 and continued till March 11, 2011.

On March 10, 2011, Vincenzo Iozzo, Willem Pinckaers and Ralf-Philipp Weinmann won $15,000 by hacking the BlackBerry Torch. Both Iozzo and Weinmann won Pwn2Own 2010 by hacking the iPhone. On that same day, Dion Blazakis and four-time Pwn2Own winner, Charlie Miller hacked Apple Safari by exploiting another WebKit flaw.

Related article:

Computer World

No comments:

Post a Comment