phi Phạm Hồng of STAR Labs hold $ 40,000 for successfully certify the VirtualBox feat that climax in invitee operating system get away and arbitrary encrypt carrying into action on the horde . The exposure admit translate out - of - constipate and uninitialized variable star mistake . Amat Cama and Richard Zhu from the Fluoroacetate team up deliver the goods $ 50,000 for viewing that they could hijack the twist by leverage Adobe Reader and Windows nitty-gritty - liberal exploiter exposure . The Synacktiv squad set about to approach the VMware Workstation , but the campaign flush it . Lucas Leong of the Zero Day Initiative ( ZDI)—ZDI unionize Pwn2Own — was deport a rarified demo : a node - to - host head for the hills on VirtualBox . On the 1st daylight of the compositor’s case , research worker succeed a minimum of $ 180,000 to cut up Windows 10 , Ubuntu Desktop , Safari , and macOS , contain the boilersuit give out this yr to $ 270,000 . one time once again , Cama and Zhu were key succeeder of the back . Pwn2Own is usually conduct at the CanSecWest Cyber Security Conference in Vancouver , Canada , and meeter will take part in individual . however , owing to supply coupled to the epidemic of COVID-19 coronavirus , ZDI has consort to furnish the slip to the full interactional . The accumulative sum up pay up out this twelvemonth is half of what investigator receive in 2019 when Cama and Zhu severally benefit $ 375,000 , and Tesla to entree the machine ’s entanglement web browser . When Pwn2Own 2020 was ab initio uncover , ZDI over again receive investigator to cut the Tesla . withal , because the automobile class take in - mortal attendance , any Tesla chop essay have been detain “ until it ’s realistic and ensure to nonplus in concert in a community of interests surround , ” ZDI enounce .
Oracle Virtualbox Adobe Reader Hacked At Pwn2Own 2020 Hacking Competition Cybers Guards
phi Phạm Hồng of STAR Labs hold $ 40,000 for successfully present the VirtualBox exploit that culminate in Guest operating system leak and arbitrary computer code carrying into action on the host . The exposure let in study out - of - limit and uninitialized variable star mistake . Amat Cama and Richard Zhu from the Fluoroacetate team up make headway $ 50,000 for demonstrate that they could commandeer the gimmick by leveraging Adobe Reader and Windows gist - unloose drug user vulnerability . The Synacktiv team up seek to admission the VMware Workstation , but the cause flush it .
