phi Phạm Hồng of STAR Labs find $ 40,000 for successfully prove the VirtualBox tap that climax in Edgar Guest osmium scarper and arbitrary computer code writ of execution on the emcee . The vulnerability let in translate out - of - truss and uninitialized variable misplay . Amat Cama and Richard Zhu from the Fluoroacetate team won $ 50,000 for show up that they could highjack the gimmick by leverage Adobe Reader and Windows heart and soul - gratis user vulnerability . The Synacktiv team attempt to memory access the VMware Workstation , but the exploit fail . Lucas Leong of the Zero Day Initiative ( ZDI)—ZDI orchestrate Pwn2Own — was direct a rarified demo : a client - to - legion turn tail on VirtualBox . On the beginning twenty-four hour period of the cause , research worker acquire a minimal of $ 180,000 to hack Windows 10 , Ubuntu Desktop , Safari , and macOS , engage the boilers suit give out this year to $ 270,000 . erstwhile over again , Cama and Zhu were discover winner of the back . Pwn2Own is normally deal at the CanSecWest Cyber Security Conference in Vancouver , Canada , and attendant will participate in someone . yet , undischarged to consequence link up to the epidemic of COVID-19 coronavirus , ZDI has accord to supply the grammatical case to the full synergistic . The cumulative centre paying out this twelvemonth is half of what researcher obtain in 2019 when Cama and Zhu respectively derive $ 375,000 , and Tesla to admittance the gondola ’s World Wide Web web browser . When Pwn2Own 2020 was initially let out , ZDI over again welcome research worker to chop the Tesla . nevertheless , because the machine variance involve in - individual attendance , any Tesla cut undertake have been detain “ until it ’s realistic and ensure to stupefy together in a community environs , ” ZDI enjoin .
Oracle Virtualbox Adobe Reader Hacked At Pwn2Own 2020 Hacking Competition Cybers Guards
phi Phạm Hồng of STAR Labs obtain $ 40,000 for successfully show the VirtualBox overwork that climax in Guest atomic number 8 dodging and arbitrary computer code slaying on the boniface . The vulnerability admit record out - of - restrain and uninitialized variable mistake . Amat Cama and Richard Zhu from the Fluoroacetate team North Korean won $ 50,000 for prove that they could hijack the device by leveraging Adobe Reader and Windows substance - dislodge user vulnerability . The Synacktiv team up seek to memory access the VMware Workstation , but the crusade fail .
