Crack team brings down IE9 with two 0-day vulnerabilities at hacker contest - Computers - International Cannagraphic Magazine Forums

PhenoMenal · 03-10-2012, 01:10 PM

https://threatpost.com/en_us/blogs/ie...OGBntQ.twitter

The same team that brought down Google's Chrome browser at the hacker contest Pwn2Own @ the CanSecWest conference (Google also offered $1M at this event for Chrome exploits) has now brought down IE9, bypassing the DEP, ASRL and Protected Mode (sandbox) protections in the process, by using two zero-day vulnerabilities they discovered and exploited. While they'll be fully disclosing one of the vulnerabilities they'll be keeping the Protected Mode Bypass vulnerability to themselves and their paying customers (mostly govt's), as it's worth a LOT more than the $60,000 on offer. They also brought zero-day vulnerabilities for Apple's Safari and Mozilla's Firefox browsers, but didn't have to use them as they already had a big enough lead (124pts) after conquering both Chrome and IE9, so they too will remain private in the teams hands.

Young Guns: The crack Vulnerability Research team from VUPEN, winners of Pwn2Own 2012:

PhenoMenal · 03-13-2012, 04:13 AM

Microsoft responds ...
https://www.youtube.com/watch?v=dnpQq8qIDmo#

joe fresh · 03-13-2012, 05:21 AM

Quote:

Originally Posted by PhenoMenal

Microsoft responds ...
https://www.youtube.com/watch?v=dnpQq8qIDmo#

that guy is blazed out his mind...look at his eyes, lol

TripleDraw27 · 03-13-2012, 05:40 AM

Quote:

Originally Posted by PhenoMenal

Microsoft responds ...
https://www.youtube.com/watch?v=dnpQq8qIDmo#

Wolverine got smaller and more nasally, lame!

And blazed, yes

Stoner4Life · 03-13-2012, 05:43 AM

I see nerds in matching hoodies.......

picture's worth a thousand words,
just sayin'

trichrider · 03-13-2012, 05:50 AM

i'm blazed. does it compute?
fuck i wish i'd been straight in school.
reaping my just rewards.

PhenoMenal · 03-13-2012, 05:59 AM

Stoner4life, haha yes they're wearing matching hoodies... of the kind Neo wore in The Matrix *rolls eyes*, but with "VUPEN" printed on the back

KonradZuse · 06-27-2012, 08:36 AM

IE is horrid anyways.

03-10-2012, 01:10 PM	#1
PhenoMenal XGames Quantumboarder Join Date: Oct 2006 Location: Oz Posts: 2,755	Crack team brings down IE9 with two 0-day vulnerabilities at hacker contest https://threatpost.com/en_us/blogs/ie...OGBntQ.twitter The same team that brought down Google's Chrome browser at the hacker contest Pwn2Own @ the CanSecWest conference (Google also offered $1M at this event for Chrome exploits) has now brought down IE9, bypassing the DEP, ASRL and Protected Mode (sandbox) protections in the process, by using two zero-day vulnerabilities they discovered and exploited. While they'll be fully disclosing one of the vulnerabilities they'll be keeping the Protected Mode Bypass vulnerability to themselves and their paying customers (mostly govt's), as it's worth a LOT more than the $60,000 on offer. They also brought zero-day vulnerabilities for Apple's Safari and Mozilla's Firefox browsers, but didn't have to use them as they already had a big enough lead (124pts) after conquering both Chrome and IE9, so they too will remain private in the teams hands. Young Guns: The crack Vulnerability Research team from VUPEN, winners of Pwn2Own 2012: __________________ ... "My job, my mission, the reason I've been put onto this planet is to save wildlife, and I thank you for coming with me" - Steve Irwin (1962-2006) Eeeasily make your own COLLOIDAL SILVER to make your own FEMINISED SEEDS! My DIY Thin Layer Chromatography @ home [link]
	Quote 2 members found this post helpful.

03-13-2012, 04:13 AM	#2
PhenoMenal XGames Quantumboarder Join Date: Oct 2006 Location: Oz Posts: 2,755	Microsoft responds ... https://www.youtube.com/watch?v=dnpQq8qIDmo# __________________ ... "My job, my mission, the reason I've been put onto this planet is to save wildlife, and I thank you for coming with me" - Steve Irwin (1962-2006) Eeeasily make your own COLLOIDAL SILVER to make your own FEMINISED SEEDS! My DIY Thin Layer Chromatography @ home [link]
	Quote

03-13-2012, 05:43 AM	#5
Stoner4Life Medicinal Advocate Join Date: Aug 2007 Location: wandering further down the path less travelled Posts: 24,474	I see nerds in matching hoodies....... picture's worth a thousand words, just sayin'
	Quote 1 members found this post helpful.

03-13-2012, 05:50 AM	#6
trichrider THEORETICAL Join Date: Apr 2010 Location: between CB1 and the singularity. Posts: 7,046	i'm blazed. does it compute? fuck i wish i'd been straight in school. reaping my just rewards. __________________ "I'm not always a dick...but when I am, I drink cheap beer".
	Quote 1 members found this post helpful.

03-13-2012, 05:59 AM	#7
PhenoMenal XGames Quantumboarder Join Date: Oct 2006 Location: Oz Posts: 2,755	Stoner4life, haha yes they're wearing matching hoodies... of the kind Neo wore in The Matrix rolls eyes, but with "VUPEN" printed on the back __________________ ... "My job, my mission, the reason I've been put onto this planet is to save wildlife, and I thank you for coming with me" - Steve Irwin (1962-2006) Eeeasily make your own COLLOIDAL SILVER to make your own FEMINISED SEEDS! My DIY Thin Layer Chromatography @ home [link]
	Quote

06-27-2012, 08:36 AM	#8
KonradZuse Member Join Date: Mar 2010 Posts: 284	IE is horrid anyways. __________________
	Quote