It took a while longer but Microsoft’s Internet Explorer 8 did not survive the hacker onslaught at this year’s CanSecWest Pwn2Own contest.
A security researcher named “Nils” (he declined to provide his full name) performed a clean drive-by download attack against the world’s most widely used browser to take full control of a Sony Vaio machine running Windows 7.
He won a cash prize and got to keep the hardware. Details of the vulnerability, which was described by contest sponsor TippingPoint ZDI as a “brilliant IE8 bug!” are being kept under wraps.
Several members of Microsoft’s security response team were on hand to witness the successful exploit.
“Nils” also scored a clean hit against Apple’s Safari (he was the second hacker to exploit Safari) and, later in the afternoon, he exploited a Firefox zero-day flaw to claim the trifecta.
Related Posts: On this day...
- HOWTO: Be A Dick To Your Wife At 80 MPH - 2012
- RSA SecurID Customers Fear Fallout From Targeted Attack On Security Firm - 2011
- Congressman Mike Rogers' opening statement on Health Care reform in Washington DC - 2010
- Michael Lewis' THE BIG SHORT, visiting the econopocalypse through the lens of LIAR'S POKER - 2010
- Broadcast Yourself - 2010
- The spectacular Davalos sisters - 2010
- Ron Paul is a finalist for the Time 100 - 2009
- Microsoft's webbrowser Internet Explorer 8 is out - 2009
- Pwn2Own 2009: Safari on a MacBook falls in seconds - 2009
- Adios Tux. Linus Torvalds gave Linux a new official Logo - 2009