• Home
  • About 404TS
  • Contact

404 Tech Support

Where IT Help is Found

  • Articles
    • Code
    • Entertainment
    • Going Green
    • Hardware, Gadgets, and Products
    • Management
    • Network
    • News
    • Operating Systems
    • Security and Privacy
    • Software
    • System Administration
    • Talking Points
    • Tech Solutions
    • Web
    • Webmaster
  • Reviews
  • Media
    • Infographics
    • Videos
  • Tech Events
  • Tools
    • How do I find my IP address?
    • Browser and plugin tests
  • Get a Technical Consultation
You are here: Home / Articles / Security and Privacy / Pwn2Own 2014 begins; Results

Pwn2Own 2014 begins; Results

2014-03-12 by Jason

The 2014 Pwn2Own competition takes place today and tomorrow at the CanSecWest 2014 conference in Vancouver. The targets to be compromised are the traditional browsers running on fully patched Windows 8.1 x64 and Mac OS X 10.9 Mavericks.

In addition to Chrome, IE11, and Firefox on Windows 8.1 and Safari on OS X, there are separate prizes for vulnerabilities in the category of plugins. Adobe Reader, Adobe Flash Player, and Oracle Java on the Windows 8.1 x64 system could net a $30k-$75k prize. This year’s new addition includes bypassing Microsoft’s Enhanced Mitigation Experience Toolkit (EMET) for $150k. EMET has been getting improvements and is often recommended when there is a vulnerability in the wild. EMET is supposed to make vulnerabilities harder to trigger, hence why an EMET bypass earns more money. Pwn2Own says it will be difficult and may not have any successful contestants, but they’re excited to provide the challenge.

Browsers:

  • Google Chrome on Windows 8.1 x64: $100,000
  • Microsoft Internet Explorer 11 on Windows 8.1 x64: $100,000
  • Mozilla Firefox on Windows 8.1 x64: $50,000
  • Apple Safari on OS X Mavericks: $65,000

Plug-ins:

  • Adobe Reader running in Internet Explorer 11 on Windows 8.1 x64: $75,000
  • Adobe Flash running in Internet Explorer 11 on Windows 8.1 x64: $75,000
  • Oracle Java running in Internet Explorer 11 on Windows 8.1 x64 (requires click-through bypass): $30,000

“Exploit Unicorn” Grand Prize:

  • SYSTEM-level code execution on Windows 8.1 x64 on Internet Explorer 11 x64 with EMET (Enhanced Mitigation Experience Toolkit) bypass: $150,000*

For more details, you can see the complete Rules and Unicorns page for Pwn2Own 2014.

pwn2own_logo

To kick off Pwn2Own 2014, the sponsors (ZDI and Google) are participating in Pwn4Fun. This will have their researchers trying to achieve the same thing as Pwn2Own but with the prize money going to charity, the Canadian Red Cross.

Stay tuned for updates on which teams or individuals are able to crack with browsers, plugins, or bypass EMET.

Day 1 Results

Sponsors Only Pwn4Fun, charity benefit

Apple Safari falls to Google, earning $32,500 for Red Cross Canada.

Internet Explorer falls to the ZDI team (Jasiel Spelman, Matt Molinyawe, Abdul-Aziz Hariri), earning another $50,000 for Red Cross Canada.

Entrants for Pwn2Own

Adobe Reader falls to VUPEN, earning them $75,000.

Internet Explorer falls to VUPEN, earning them $100,000.

Mozilla Firefox falls to Mariusz Mlynski, earning them $50,000.

Adobe Flash Player falls to VUPEN, earning them $75,000.

Mozilla Firefox falls to VUPEN, earning them $50,000.

Mozilla Firefox falls to Jüri Aedla, earning them $50,000.

Day 2 Results

Apple Safari falls to Liang Chen of Keen Team, earning them $65,000.

Microsoft Internet Explorer withstood the attempt by Jung Hoon Lee of ASRT.

Mozilla Firefox falls to George Hotz, earning them $50,000.

Internet Explorer falls to Sebastian Apelt and Andreas Schmidt, earning them $100,000.

Google Chrome falls to VUPEN, earning them $100,000.

Google Chrome falls to an anonymous research via a proxy, earning them $100,000.

Adobe Flash Player falls to Zeguang Zhao of team509 and Liang Chen of Keen Team, earning them $75,000.

Filed Under: Security and Privacy

Trending

  • IBM Drains Itself Out of University of Illinois ‘Blue Waters’ Supercomputer
    In Hardware, Gadgets, and Products, News
  • Ways to monetize your website [infographic]
    In Infographics, Media
  • Netflix App Gallery – Mobile, Web, Or Desktop-Based Apps Let You Get The Most Out Of Netflix
    In Entertainment, Hardware, Gadgets, and Products, Media, Software

Latest Media Posts

Find Out Where To Download SNES ROMs

Find Out Where To Download SNES ROMs

Multifunctional Video Conversion Tools – Wondershare Video Converter

Multifunctional Video Conversion Tools – Wondershare Video Converter

  • Popular
  • Latest
  • Today Week Month All
  • How to ‘Unblock’ multiple files at a time with PowerShell How to 'Unblock' multiple files at a time with PowerShell
  • Command line to take ownership and change permissions Command line to take ownership and change permissions
  • Increase IIS Private Memory Limit to improve WSUS availability Increase IIS Private Memory Limit to improve WSUS availability
  • SOLVED: “This modification is not allowed because the selection is locked.” SOLVED: "This modification is not allowed because the selection is locked."
  • Creating and editing views in phpMyAdmin Creating and editing views in phpMyAdmin
  • customer contactless payment for drink with mobile phon at cafe counter bar,seller coffee shop accept payment by mobile.new normal lifestyle concept The Latest Innovations In Payment Technology
  • How Digital Technology Brought the Rise of the CMO   How Digital Technology Brought the Rise of the CMO  
  • How to Purchase Cryptocurrencies? How to Purchase Cryptocurrencies?
  • Top 6 necessary aspects to consider when hiring Angular developers Top 6 necessary aspects to consider when hiring Angular developers
  • Full guide on drawbacks and benefits of Node.js for making the perfect choice for your business Full guide on drawbacks and benefits of Node.js for making the perfect choice for your business
Ajax spinner

Elevator Pitch

404 Tech Support documents solutions to IT problems, shares worthwhile software and websites, and reviews hardware, consumer electronics, and technology-related books.

Subscribe to 404TS articles by email.

Recent Posts

  • The Latest Innovations In Payment Technology
  • How Digital Technology Brought the Rise of the CMO  
  • How to Purchase Cryptocurrencies?

Search

FTC Disclaimer

404TechSupport is an Amazon.com affiliate; when you click on an Amazon link from 404TS, the site gets a cut of the proceeds from whatever you buy. This site also uses Skimlinks for smart monetization of other affiliate links.
Use of this site requires displaying and viewing ads as they are presented.

Copyright © 2023 · Magazine Pro Theme on Genesis Framework · WordPress · Log in