An nuna rashin lahani na kwanaki 0 ​​a cikin Chrome da qemu-kvm a gasar cin kofin Tianfu

A gasar da aka gudanar a kasar Sin Gasar PWN ta Tianfu (mai kama da Pwn2Own don masu binciken tsaro na kasar Sin) sun nuna nasarar hacks guda biyu Chrome kuma daya hack ku-kvm a cikin yanayin Ubuntu, wanda ya ba ku damar barin yanayin keɓe kuma ku gudanar da lambar a gefen tsarin tsarin. An gudanar da kutse ta hanyar amfani da lahani na kwanaki 0 ​​waɗanda ba a daidaita su ba. Bugu da kari, an samu nasarar cin gajiyar sabbin lahani a cikin Edge, Safari, Office 365, Adobe PDF Reader, VMWare Workstation da na'ura mai ba da hanya tsakanin hanyoyin sadarwa na D-Link DIR-878 a gasar.

A cikin kwanaki biyu na gasar, an yi ƙoƙari 28 don nuna hacking ta amfani da raunin kwanaki 0, wanda 20 sun yi nasara. Kungiyar da ta fi samun nasara ita ce 360Vulcan, wacce ta samu dala dubu 382 a lokacin gasar, inda aka biya dala dubu 200 don amfani da VMWare, da dubu 80 don harin QEMU a muhallin Ubuntu. An kirkiro gasar cin kofin Tianfu ne bayan da gwamnatin kasar Sin a bara ta haramtawa masu bincike kan harkokin tsaro na kasar Sin shiga gasar satar kwamfuta ta kasa da kasa kamar Pwn2Own.

source: budenet.ru

Add a comment