Friday, March 4, 2011

Likely pre-Pwn2Own Safari patch unlikely stop three-time pwner

As part of the iTunes 10.2 update released on Wednesday, Apple patched an unprecedented number of vulnerabilities in WebKit, the Web-rendering engine that powers Safari and the iTunes Store. According to French security firm Vupen, Apple plans to add those patches to Safari 5 in an update set to be released before the Pwn2Own hacking competition at CanSecWest 2011. Still, security researcher Charlie Miller, known for "pwning" Safari for the last three years running, doesn't think a potential patch will present much of a challenge in his fourth attempt to crack Apple's browser.

In the security bulletin for iTunes 10.2, Apple made note of 50 separate vulnerabilities related to "memory corruption issues." Those issues could enable a man-in-the-middle attack while browsing the iTunes Store, which Apple noted could lead to "unexpected application termination or arbitrary code execution."

Read the rest of this article...

Read the comments on this post


NVIDIA NUANCE COMMUNICATIONS NOVELLUS SYSTEMS NOVELL NETWORK APPLIANCE

No comments:

Post a Comment