IE8, Safari, Firefox 3, iPhone OS 3 All Compromised at Pwn2Own
Every year, security researchers get together at the Pwn2Own contest and try to compromise machines using zero-day exploits.
This year, Internet Explorer 8 and Firefox 3 on Windows 7 was compromised, as were Mac OS X 10.6 via Safari 4, and iPhone OS3. Google's Chrome browser was unhacked, but also untested: no one attempted to crack the program.
The exploits will be reported to vendors before they are made public (thankfully), but there is an abridged video, embedded below, of researcher Peter Vreugdenhil using the IE8 exploit to take the program down.
Charlie Miller hacked Safari for the third year in a row, and Vincenzo Iozzo teamed with Ralf-Philipp Weinmann to gain access to text messages stored on an iPhone. Their exploit was able to bypass the iPhone Data Execution Protection.
Follow Technorati