Softpedia
 

NEWS CATEGORIES:



NEWS ARCHIVE >>
SOFTPEDIA REVIEWS >>
MEET THE EDITORS >>
TRENDING TODAY
Home > News > Webmaster > Web Blog

October 11th, 2012, 09:20 GMT · By

BLOG

Google Details Pinkie Pie's Exploit That Brought Chrome to Its Knees

SHARE:

Adjust text size:


Pwnium 2 at Hack in the Box Enlarge picture - Pwnium 2 at Hack in the Box
Google has more details on the exploit that brought Chrome to its knees once again during the Pwnium 2 contest. The teenage hacker known as Pinkie Pie managed to snatch the grand prize of $60,000 for the second time. His was the only entry in the contest.

But Google has confirmed that the exploit used only Chrome bugs so it was eligible for the largest award.

Google explained that the exploit used two main bugs, one in WebKit and one in the IPC (inter-process communication) layer to get out of the Chrome sandbox.

"This pwn relies on a WebKit Scalable Vector Graphics (SVG) compromise to exploit the renderer process and a second bug in the IPC layer to escape the Chrome sandbox," Google's Chris Evans explained.

Just 10 hours after Pwnium 2 ended, Chrome was already updated and the bugs that allowed the exploit fixed.

PWNIUM 2 - PHOTO GALLERY:

TELL US WHAT YOU THINK:

2,165 hits · Link to this article · Print article · Send to friend · Subscribe to news

MUST-READ RELATED ARTICLES:


Chrome Security Update Patches Pinkie Pie's $60,000 Exploit

Pinkie Pie Pwns Chrome for the Second Time to Get $60,000

Step-by-Step Guide to Enabling Dropbox Two-Step Verification

Firefox 18 to Get “Click-to-Play Plugins,” the Built-in Ad Blocker, at the Earliest

Unpatched Java Vulnerability Leads Mozilla to Block the Plugin in Firefox

READER COMMENTS:



No user comments yet.
Be the first to express your opinion!
Copyright © 2001-2013 Softpedia. Contact/Tip us at

WindowsGamesDriversMacLinuxScriptsMobileHandheldNews

SUBMIT PROGRAM   |   ADVERTISE   |   GET HELP   |   SEND US FEEDBACK   |   RSS FEEDS   |   UPDATE YOUR SOFTWARE   |   ROMANIAN FORUM