Google Chrome is via 2 bugs completely cracked, within 5 minutes. And then again cracked by another. Both hackers knew from the sandbox to escape and run code to execute.
The hack has happened in the Pwn2Own cracking contest at CanSecWest security meeting. The first cracking is done by the French security company VUPEN. In addition, Chrome also caught by another cracker, which thus assured of $ 60,000 prize money from Google. The Chrome-maker awards a total of $ 1 million for detected and reported vulnerabilities in its web browser.
The Internet giant will reward security researchers who exploits, complete with bugs used for this purpose, disclose to software makers. In late February, Google has decided to afford his own premiums, and no longer through Pwn2Own. The reason is that cracking game no longer requires that exploits and bugs will be shared with the creator of the cracked software.
Chrome-cracker when equal VUPEN has already shown no interest in Google’s terms. The French security company sells information about discovered security holes at large corporations and governments. And software vendors who have a contract with VUPEN.
