[ZuGgY]

#Pwn2Own Chinese team cracks Internet Explorer in 11 seconds flat, other top browser fall to ethical hackers

In current cyber security scenario, hackers once again proved that there is no such thing as a secure browser. Security researchers, ethical hackers and bug bounty hunter who participated in the Pwn2Own hacking contest this week successfully demonstrated remote code execution exploits against the Chrome, Internet Explorer, Firefox and Safari. They also hacked the ever willing hack candidate, Adobe Reader and Flash Player plug-ins.

Pwn2Own is a popular yearly hacking contest and this years contest was organized in Vancouver, Canada this week. The Pwn2own was dominated by the Chinese hacking team as they successfully they “broke” Internet Explorer 11 in only 17 seconds and created a world record of sorts. The team called 360Vulcan sadly failed capture the unicorn prize of the contest but become centre of attention among the competitors and organizers.

The Internet Explorer 11 was put ahead of all browsers by the organizers because is protected with enhanced sandbox, a full 64 bit process, EMET (Microsoft’s Enhanced Mitigation Experience Toolkit), the security mechanisms of Windows 8.1 but 360Vulcan team managed to bypass all these measures and hack Internet Explorer after 17 seconds, which is remarkable.

On Thursday, South Korean security researcher and serial browser hacker JungHoon Lee, known online as lokihardt walked away with US$225,000 in prize money and new laptop for exploiting Internet Explorer 11 and Google Chrome on Windows, Safari on Mac OS X.

Another researcher who’s online handle is ilxu1a popped Mozilla Firefox on Windows for a $15,000 prize. Mozilla’s Firefox was also hacked by Mariusz Mlynski by leveraging a Windows flaw to gain SYSTEM privileges, earning him a $25,000 bonus on top of the standard $30,000 payout for the Firefox hack.

The Pwn2Own contest is sponsored by Hewlett-Packard’s Zero Day Initiative program and pits security researchers, ethical hackers and bug bounty hunters against the 64-bit versions of the top browsers in the world. This years Pwn2Own listed following successful hack candidates :

Five flaws in the Windows OS

Four in Internet Explorer 11

Three each in Mozilla Firefox, Adobe Reader, and Flash Player

Two in Apple Safari

One in Google Chrome which emerged as the least vulnerable one for now.

Source

Damn, the Chinese are impressive. Glad GC only has one :)

[archangel.dmitry]

Chinese are known to be skilled but it is scary how many problems Microsoft (MS) code has. It is no surprise that MS decided to shut down IE.

[Warren Buffett]

Also, don't think Opera is out of this. Opera is based off of Chromium.

[ZuGgY]

Also, don't think Opera is out of this. Opera is based off of Chromium.

Yup. I hope many people, or at the very least, Opera's users, are aware of this.

[Harbo5]

Netscape lives on as the" superior" browser.

[Ahri]

Only use chrome, I don't have flash anymore lol.