Overclock.net › Forums › Industry News › Software News › [ZDnet] Safari/MacBook first to fall at Pwn2Own 2011
New Posts  All Forums:Forum Nav:

[ZDnet] Safari/MacBook first to fall at Pwn2Own 2011

post #1 of 56
Thread Starter 
Quote:
VANCOUVER — A team of security researchers from the French pen-testing firm VUPEN successfully exploited a zero-day flaw in Apple’s Safari browser to win this year’s Pwn2Own hacker challenge.

VUPEN co-founder Chaouki Bekrar (right) lured a target MacBook to a specially rigged website and successfully launched a calculator on the compromised machine.

The hijacked machine was running a fully patched version of Mac OS X (64-bit).

In an interview with ZDNet, Bekrar said the vulnerability exists in WebKit, the open-source browser rendering engine. A three-man team of researchers spent about two weeks to find the vulnerability (using fuzzers) and writing a reliable exploit.

VUPEN won a $15,000 cash prize and an Apple MacBook Air 13″ running Mac OS X Snow Leopard.
http://www.zdnet.com/blog/security/s...t;feature-roto
post #2 of 56
Not surprised...
Haf X rig
(13 items)
 
  
CPUMotherboardGraphicsRAM
2600k @ 4.8Ghz Fatal1ty Z68 Pro XFX 5870 16GB Gskill 1600Mhz 
Hard DriveOptical DriveOSMonitor
2x Spinpoint F3 in RAID 0 LG HD-DVD/Blu-Ray combo Windows 7 Ultimate 64-bit Crossover 27" LED IPS 2560x1440 
KeyboardPowerCaseMouse
Logitech G15 Kingwin 1000w Haf X Logitech G500 
Mouse Pad
Xtrac Ripper 
  hide details  
Reply
Haf X rig
(13 items)
 
  
CPUMotherboardGraphicsRAM
2600k @ 4.8Ghz Fatal1ty Z68 Pro XFX 5870 16GB Gskill 1600Mhz 
Hard DriveOptical DriveOSMonitor
2x Spinpoint F3 in RAID 0 LG HD-DVD/Blu-Ray combo Windows 7 Ultimate 64-bit Crossover 27" LED IPS 2560x1440 
KeyboardPowerCaseMouse
Logitech G15 Kingwin 1000w Haf X Logitech G500 
Mouse Pad
Xtrac Ripper 
  hide details  
Reply
post #3 of 56
Anyone see the irony that the hackers won a MacBook as a prize for this?
Foldatron
(17 items)
 
Mat
(10 items)
 
Work iMac
(9 items)
 
CPUMotherboardGraphicsGraphics
i7 950 EVGA x58 3-way SLI EVGA GTX 660ti GTX 275 
RAMHard DriveHard DriveHard Drive
3x2GB Corsair Dominator DDR3-1600 80GB Intel X25-M SSD 2TB WD Black 150GB WD Raptor 
Hard DriveOSMonitorKeyboard
2x 150GB WD V-raptor in RAID0 Win7 Home 64-bit OEM 55" LED 120hz 1080p Vizio MS Natural Ergonomic Keyboard 4000 
PowerCase
750W PC P&C Silencer CoolerMaster 690 
CPUGraphicsRAMHard Drive
Intel Core i5 2500S AMD 6770M 8GB (2x4GB) at 1333Mhz 1TB, 7200 rpm 
Optical DriveOSMonitorKeyboard
LG 8X Dual-Layer "SuperDrive" OS X Lion 27" iMac screen Mac wireless keyboard 
Mouse
Mac wireless mouse 
CPUGraphicsRAMHard Drive
i7-2600K AMD 6970M 1GB 16GB PC3-10600 DDR3 1TB 7200rpm 
Hard DriveOptical DriveOSMonitor
256GB SSD 8x DL "SuperDrive" OS X 10.7 Lion 27" 2560x1440 iMac display 
Monitor
27" Apple thunderbolt display 
  hide details  
Reply
Foldatron
(17 items)
 
Mat
(10 items)
 
Work iMac
(9 items)
 
CPUMotherboardGraphicsGraphics
i7 950 EVGA x58 3-way SLI EVGA GTX 660ti GTX 275 
RAMHard DriveHard DriveHard Drive
3x2GB Corsair Dominator DDR3-1600 80GB Intel X25-M SSD 2TB WD Black 150GB WD Raptor 
Hard DriveOSMonitorKeyboard
2x 150GB WD V-raptor in RAID0 Win7 Home 64-bit OEM 55" LED 120hz 1080p Vizio MS Natural Ergonomic Keyboard 4000 
PowerCase
750W PC P&C Silencer CoolerMaster 690 
CPUGraphicsRAMHard Drive
Intel Core i5 2500S AMD 6770M 8GB (2x4GB) at 1333Mhz 1TB, 7200 rpm 
Optical DriveOSMonitorKeyboard
LG 8X Dual-Layer "SuperDrive" OS X Lion 27" iMac screen Mac wireless keyboard 
Mouse
Mac wireless mouse 
CPUGraphicsRAMHard Drive
i7-2600K AMD 6970M 1GB 16GB PC3-10600 DDR3 1TB 7200rpm 
Hard DriveOptical DriveOSMonitor
256GB SSD 8x DL "SuperDrive" OS X 10.7 Lion 27" 2560x1440 iMac display 
Monitor
27" Apple thunderbolt display 
  hide details  
Reply
post #4 of 56
How many years in a row is this now?

Quote:
Originally Posted by lordikon View Post
Anyone see the irony that the hackers won a MacBook as a prize for this?
You win whatever platform you crack. The guy who hacked Win 7 got a Windows laptop.
Edited by IEATFISH - 3/9/11 at 6:00pm
Gunmetal Tower
(23 items)
 
  
CPUMotherboardGraphicsRAM
Intel 2600K ASUS P8Z68-V GEN3 Asus GTX 580 CORSAIR Vengeance 16GB 1600 
Hard DriveHard DriveOptical DriveCooling
Samsung 830 256GB Western Digital Caviar Black 640GB LG DVD Corsair H80 
OSMonitorMonitorKeyboard
Microsoft Windows 8.1 Professional 64 Bit Asus PB278Q Dell 1907FPc  Ducky 9008-G2 Browns and Reds 
PowerCaseMouseMouse Pad
ABS SL1050 1050W Antec P280 Logitech G700 Mionix Propus 380 
AudioAudioAudioAudio
HT | OMEGA Claro Halo Audio Technica ATH-A900X Audio Technica ATH-AD900 M-Audio AV 40 
OtherOtherOther
Logitech USB Desktop Microphone APC Back-UPS XS 1500 Wacom Intuos4 
  hide details  
Reply
Gunmetal Tower
(23 items)
 
  
CPUMotherboardGraphicsRAM
Intel 2600K ASUS P8Z68-V GEN3 Asus GTX 580 CORSAIR Vengeance 16GB 1600 
Hard DriveHard DriveOptical DriveCooling
Samsung 830 256GB Western Digital Caviar Black 640GB LG DVD Corsair H80 
OSMonitorMonitorKeyboard
Microsoft Windows 8.1 Professional 64 Bit Asus PB278Q Dell 1907FPc  Ducky 9008-G2 Browns and Reds 
PowerCaseMouseMouse Pad
ABS SL1050 1050W Antec P280 Logitech G700 Mionix Propus 380 
AudioAudioAudioAudio
HT | OMEGA Claro Halo Audio Technica ATH-A900X Audio Technica ATH-AD900 M-Audio AV 40 
OtherOtherOther
Logitech USB Desktop Microphone APC Back-UPS XS 1500 Wacom Intuos4 
  hide details  
Reply
post #5 of 56
Quote:
Originally Posted by IEATFISH View Post
You win whatever platform you crack. The guy who hacked Win 7 got a Windows laptop.
Damn, now I wish SR-2's have a security flaw specific to them...
A-Trance
(14 items)
 
  
CPUMotherboardGraphicsRAM
AMD Phenom II X4 965 790GX-G65 (MS-7576) NVIDIA GeForce 9800 GT G.Skill Ripjaws 1600 CL9 
RAMHard DriveOSMonitor
G.Skill Ripjaws 1600 CL9 G.Skill Phoenix Pro 60GB, 1TB WD Caviar Black Windows 7 Pro x64 Samsung 21.5' 
KeyboardPowerCase
Logitech G100 Gigabyte Superb 720W Antec 300 Modded 
  hide details  
Reply
A-Trance
(14 items)
 
  
CPUMotherboardGraphicsRAM
AMD Phenom II X4 965 790GX-G65 (MS-7576) NVIDIA GeForce 9800 GT G.Skill Ripjaws 1600 CL9 
RAMHard DriveOSMonitor
G.Skill Ripjaws 1600 CL9 G.Skill Phoenix Pro 60GB, 1TB WD Caviar Black Windows 7 Pro x64 Samsung 21.5' 
KeyboardPowerCase
Logitech G100 Gigabyte Superb 720W Antec 300 Modded 
  hide details  
Reply
post #6 of 56
Quote:
Originally Posted by IEATFISH View Post
You win whatever platform you crack. The guy who hacked Win 7 got a Windows laptop.
Ah, then it's a cruel irony.
Foldatron
(17 items)
 
Mat
(10 items)
 
Work iMac
(9 items)
 
CPUMotherboardGraphicsGraphics
i7 950 EVGA x58 3-way SLI EVGA GTX 660ti GTX 275 
RAMHard DriveHard DriveHard Drive
3x2GB Corsair Dominator DDR3-1600 80GB Intel X25-M SSD 2TB WD Black 150GB WD Raptor 
Hard DriveOSMonitorKeyboard
2x 150GB WD V-raptor in RAID0 Win7 Home 64-bit OEM 55" LED 120hz 1080p Vizio MS Natural Ergonomic Keyboard 4000 
PowerCase
750W PC P&C Silencer CoolerMaster 690 
CPUGraphicsRAMHard Drive
Intel Core i5 2500S AMD 6770M 8GB (2x4GB) at 1333Mhz 1TB, 7200 rpm 
Optical DriveOSMonitorKeyboard
LG 8X Dual-Layer "SuperDrive" OS X Lion 27" iMac screen Mac wireless keyboard 
Mouse
Mac wireless mouse 
CPUGraphicsRAMHard Drive
i7-2600K AMD 6970M 1GB 16GB PC3-10600 DDR3 1TB 7200rpm 
Hard DriveOptical DriveOSMonitor
256GB SSD 8x DL "SuperDrive" OS X 10.7 Lion 27" 2560x1440 iMac display 
Monitor
27" Apple thunderbolt display 
  hide details  
Reply
Foldatron
(17 items)
 
Mat
(10 items)
 
Work iMac
(9 items)
 
CPUMotherboardGraphicsGraphics
i7 950 EVGA x58 3-way SLI EVGA GTX 660ti GTX 275 
RAMHard DriveHard DriveHard Drive
3x2GB Corsair Dominator DDR3-1600 80GB Intel X25-M SSD 2TB WD Black 150GB WD Raptor 
Hard DriveOSMonitorKeyboard
2x 150GB WD V-raptor in RAID0 Win7 Home 64-bit OEM 55" LED 120hz 1080p Vizio MS Natural Ergonomic Keyboard 4000 
PowerCase
750W PC P&C Silencer CoolerMaster 690 
CPUGraphicsRAMHard Drive
Intel Core i5 2500S AMD 6770M 8GB (2x4GB) at 1333Mhz 1TB, 7200 rpm 
Optical DriveOSMonitorKeyboard
LG 8X Dual-Layer "SuperDrive" OS X Lion 27" iMac screen Mac wireless keyboard 
Mouse
Mac wireless mouse 
CPUGraphicsRAMHard Drive
i7-2600K AMD 6970M 1GB 16GB PC3-10600 DDR3 1TB 7200rpm 
Hard DriveOptical DriveOSMonitor
256GB SSD 8x DL "SuperDrive" OS X 10.7 Lion 27" 2560x1440 iMac display 
Monitor
27" Apple thunderbolt display 
  hide details  
Reply
post #7 of 56
fully patched meaning including the patch that was released earlier today? im not even sure that would have changed anything but... wait launched a calculator?
Macbook Pro
(14 items)
 
  
CPUGraphicsRAMHard Drive
2.2ghz i7 ATI 6750m & Intel HD 3000 8gb ddr3 OCZ Vertex 4 
Optical DriveOptical DriveOSMonitor
superdrive External bluray  10.8 (Mountain Lion) 15.4" 1680x1050 
Case
aluminium 
  hide details  
Reply
Macbook Pro
(14 items)
 
  
CPUGraphicsRAMHard Drive
2.2ghz i7 ATI 6750m & Intel HD 3000 8gb ddr3 OCZ Vertex 4 
Optical DriveOptical DriveOSMonitor
superdrive External bluray  10.8 (Mountain Lion) 15.4" 1680x1050 
Case
aluminium 
  hide details  
Reply
post #8 of 56
Quote:
Originally Posted by oregonducks45 View Post
fully patched meaning including the patch that was released earlier today? im not even sure that would have changed anything but... wait launched a calculator?
I believe it is referring to the last minute updates that all the companies put out right before these conferences. Apple's update fixed over 60 flaws but apparently it wasn't enough: http://www.zdnet.com/blog/security/p...s-patches/8348 And launching a calculator means they can launch anything they want. They also had to write a file to the disk. So pretty much they are in your computer with complete control from you simply visiting a webpage.
Edited by IEATFISH - 3/9/11 at 7:14pm
Gunmetal Tower
(23 items)
 
  
CPUMotherboardGraphicsRAM
Intel 2600K ASUS P8Z68-V GEN3 Asus GTX 580 CORSAIR Vengeance 16GB 1600 
Hard DriveHard DriveOptical DriveCooling
Samsung 830 256GB Western Digital Caviar Black 640GB LG DVD Corsair H80 
OSMonitorMonitorKeyboard
Microsoft Windows 8.1 Professional 64 Bit Asus PB278Q Dell 1907FPc  Ducky 9008-G2 Browns and Reds 
PowerCaseMouseMouse Pad
ABS SL1050 1050W Antec P280 Logitech G700 Mionix Propus 380 
AudioAudioAudioAudio
HT | OMEGA Claro Halo Audio Technica ATH-A900X Audio Technica ATH-AD900 M-Audio AV 40 
OtherOtherOther
Logitech USB Desktop Microphone APC Back-UPS XS 1500 Wacom Intuos4 
  hide details  
Reply
Gunmetal Tower
(23 items)
 
  
CPUMotherboardGraphicsRAM
Intel 2600K ASUS P8Z68-V GEN3 Asus GTX 580 CORSAIR Vengeance 16GB 1600 
Hard DriveHard DriveOptical DriveCooling
Samsung 830 256GB Western Digital Caviar Black 640GB LG DVD Corsair H80 
OSMonitorMonitorKeyboard
Microsoft Windows 8.1 Professional 64 Bit Asus PB278Q Dell 1907FPc  Ducky 9008-G2 Browns and Reds 
PowerCaseMouseMouse Pad
ABS SL1050 1050W Antec P280 Logitech G700 Mionix Propus 380 
AudioAudioAudioAudio
HT | OMEGA Claro Halo Audio Technica ATH-A900X Audio Technica ATH-AD900 M-Audio AV 40 
OtherOtherOther
Logitech USB Desktop Microphone APC Back-UPS XS 1500 Wacom Intuos4 
  hide details  
Reply
post #9 of 56
MacBook air? They should be giving MacBook pro 17 inch for their hard work.
Fearless~
(20 items)
 
The Intel Side
(18 items)
 
 
CPUMotherboardGraphicsRAM
AMD Phenom II X6 1090T @ 3.8 Asus Sabertooth 990FX EVGA GrillForce GTX 465 SLI Mushkin Blackline 2x4gb 1600mhz [1.5v] 
Hard DriveHard DriveHard DriveOptical Drive
OCZ Vertex 3 120GB WD Caviar Black (1002FAEX)1TB Synology DS210J (4tb) Lite-on DVD Rewriter 16x IDE External 
CoolingOSMonitorKeyboard
Noctua NH-D14 Windows 7 Home Premium x64 Samsung Syncmaster E2320 Metadot Das Professional S Silent 
PowerCaseMouseMouse Pad
Corsair TX 850 V1 [Original PSH] NZXT Gamma Classic Series Mid-Tower Logitech VX Revolution Razer Sphex 
AudioAudioAudioAudio
Asus Xonar DX Klipsch Promedia 2.1 Bose Triport/Klipsch S3 Blue Snowball 
CPUMotherboardGraphicsRAM
Intel i3 2100 Gigabyte H61M-S2PV Asus GT430 Corsair XMS3 2x2gb 1333mhz 
Hard DriveHard DriveHard DriveOptical Drive
Intel X-25V 40GB Synology DS210j (4tb) Seagate Barracuda 120gb LG CH12LS28 Blu Ray  
CoolingOSOSMonitor
Thermalright X-Silent 120 Mac OS X 10.8.2 Windows 7 Ultimate x64 Toshiba 46VX700VU 
KeyboardPowerCaseMouse
Microsoft Wireless Optical Desktop 700 XFX 450w Core Edition Silverstone ML03B Microsoft Wireless Optical Desktop 700 
AudioAudio
Realtek Onboard Klipsch Promedia 2.1 
CPUMotherboardGraphicsRAM
Core 2 Duo P8700 2.53ghz Apple Logic Board Nvidia Geforce 9400m 4gb @1066 
Hard DriveHard DriveOptical DriveOS
Western Digital Scorpio Black 320gb Synology DS210j (4tb) Apple SuperDrive Mac OS X 10.8.4/Windows 7 Ultimate 64bit 
MonitorKeyboardPowerCase
13" 1280x800 Glossy Backlit Apple Keyboard/OCN Ducky Tenkeyless [MX... 65w Magsafe Aluminium Unibody 
MouseAudioAudio
Apple Trackpad/Logitech MX310 Fiio A1 + Sony Bookshelf Blue Snowball 
  hide details  
Reply
Fearless~
(20 items)
 
The Intel Side
(18 items)
 
 
CPUMotherboardGraphicsRAM
AMD Phenom II X6 1090T @ 3.8 Asus Sabertooth 990FX EVGA GrillForce GTX 465 SLI Mushkin Blackline 2x4gb 1600mhz [1.5v] 
Hard DriveHard DriveHard DriveOptical Drive
OCZ Vertex 3 120GB WD Caviar Black (1002FAEX)1TB Synology DS210J (4tb) Lite-on DVD Rewriter 16x IDE External 
CoolingOSMonitorKeyboard
Noctua NH-D14 Windows 7 Home Premium x64 Samsung Syncmaster E2320 Metadot Das Professional S Silent 
PowerCaseMouseMouse Pad
Corsair TX 850 V1 [Original PSH] NZXT Gamma Classic Series Mid-Tower Logitech VX Revolution Razer Sphex 
AudioAudioAudioAudio
Asus Xonar DX Klipsch Promedia 2.1 Bose Triport/Klipsch S3 Blue Snowball 
CPUMotherboardGraphicsRAM
Intel i3 2100 Gigabyte H61M-S2PV Asus GT430 Corsair XMS3 2x2gb 1333mhz 
Hard DriveHard DriveHard DriveOptical Drive
Intel X-25V 40GB Synology DS210j (4tb) Seagate Barracuda 120gb LG CH12LS28 Blu Ray  
CoolingOSOSMonitor
Thermalright X-Silent 120 Mac OS X 10.8.2 Windows 7 Ultimate x64 Toshiba 46VX700VU 
KeyboardPowerCaseMouse
Microsoft Wireless Optical Desktop 700 XFX 450w Core Edition Silverstone ML03B Microsoft Wireless Optical Desktop 700 
AudioAudio
Realtek Onboard Klipsch Promedia 2.1 
CPUMotherboardGraphicsRAM
Core 2 Duo P8700 2.53ghz Apple Logic Board Nvidia Geforce 9400m 4gb @1066 
Hard DriveHard DriveOptical DriveOS
Western Digital Scorpio Black 320gb Synology DS210j (4tb) Apple SuperDrive Mac OS X 10.8.4/Windows 7 Ultimate 64bit 
MonitorKeyboardPowerCase
13" 1280x800 Glossy Backlit Apple Keyboard/OCN Ducky Tenkeyless [MX... 65w Magsafe Aluminium Unibody 
MouseAudioAudio
Apple Trackpad/Logitech MX310 Fiio A1 + Sony Bookshelf Blue Snowball 
  hide details  
Reply
post #10 of 56
Quote:
Originally Posted by oregonducks45 View Post
fully patched meaning including the patch that was released earlier today? im not even sure that would have changed anything but... wait launched a calculator?
A non-admin user being about to launch an application.... system is compromised.
Once again...
(13 items)
 
  
CPUMotherboardGraphicsRAM
i7 920 [4.28GHz, HT] Asus P6T + Broadcom NetXtreme II VisionTek HD5850 [900/1200] + Galaxy GT240 2x4GB G.Skill Ripjaw X [1632 MHz] 
Hard DriveOSMonitorKeyboard
Intel X25-M 160GB + 3xRAID0 500GB 7200.12 Window 7 Pro 64 Acer H243H + Samsung 226BW XARMOR-U9BL  
PowerCaseMouseMouse Pad
Antec Truepower New 750W Li Lian PC-V2100 [10x120mm fans] Logitech G9 X-Trac Pro 
  hide details  
Reply
Once again...
(13 items)
 
  
CPUMotherboardGraphicsRAM
i7 920 [4.28GHz, HT] Asus P6T + Broadcom NetXtreme II VisionTek HD5850 [900/1200] + Galaxy GT240 2x4GB G.Skill Ripjaw X [1632 MHz] 
Hard DriveOSMonitorKeyboard
Intel X25-M 160GB + 3xRAID0 500GB 7200.12 Window 7 Pro 64 Acer H243H + Samsung 226BW XARMOR-U9BL  
PowerCaseMouseMouse Pad
Antec Truepower New 750W Li Lian PC-V2100 [10x120mm fans] Logitech G9 X-Trac Pro 
  hide details  
Reply
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Software News
Overclock.net › Forums › Industry News › Software News › [ZDnet] Safari/MacBook first to fall at Pwn2Own 2011