cdmagurus.com
11-15-2013, 11:04 AM
Google released emergency security updates for Chrome in order to patch critical vulnerabilities demonstrated Thursday by a security researcher at the Mobile Pwn2Own hacking competition.
The vulnerabilities were exploited by a security researcher who uses the pseudonym Pinkie Pie (http://www.pcworld.com/article/2063560/researchers-hack-internet-explorer-11-and-chrome-at-mobile-pwn2own.html) to achieve arbitrary code execution on a Nexus 4 and a Samsung Galaxy S4 device, earning him a prize of $50,000 in the contest.
Following Pinkie Pie’s demonstration, the vulnerabilities were reported to Google, which took less than a day to fix them and push out new patches.
Even though the researcher demonstrated his exploit on Chrome for Android, Google also fixed the vulnerabilities in Chrome for Windows, Mac and Linux, as well as in Chrome Frame plug-in for Internet Explorer.
To read this article in full or to leave a comment, please click here (http://cdmagurus.com/article/2063980/google-fixes-chrome-vulnerabilities-exploited-at-pwn2own-contest.html#jump)
More... (http://www.pcworld.com/article/2063980/google-fixes-chrome-vulnerabilities-exploited-at-pwn2own-contest.html#tk.rss_all)
The vulnerabilities were exploited by a security researcher who uses the pseudonym Pinkie Pie (http://www.pcworld.com/article/2063560/researchers-hack-internet-explorer-11-and-chrome-at-mobile-pwn2own.html) to achieve arbitrary code execution on a Nexus 4 and a Samsung Galaxy S4 device, earning him a prize of $50,000 in the contest.
Following Pinkie Pie’s demonstration, the vulnerabilities were reported to Google, which took less than a day to fix them and push out new patches.
Even though the researcher demonstrated his exploit on Chrome for Android, Google also fixed the vulnerabilities in Chrome for Windows, Mac and Linux, as well as in Chrome Frame plug-in for Internet Explorer.
To read this article in full or to leave a comment, please click here (http://cdmagurus.com/article/2063980/google-fixes-chrome-vulnerabilities-exploited-at-pwn2own-contest.html#jump)
More... (http://www.pcworld.com/article/2063980/google-fixes-chrome-vulnerabilities-exploited-at-pwn2own-contest.html#tk.rss_all)