Zowopsa zamasiku 0 mu Chrome ndi qemu-kvm zidawonetsedwa pa mpikisano wa Tianfu Cup

Pampikisano womwe unachitikira ku China Tianfu Cup PWN Contest (zofanana ndi Pwn2Own kwa ofufuza zachitetezo aku China) adawonetsa ma hacks awiri ochita bwino Chrome ndi kuthyolako kumodzi qemu-sq.m ozunguliridwa Ubuntu, zomwe zinalola woukirayo kuthawa malo obisika ndikugwiritsa ntchito code pa dongosolo la host. Ma hacks adachitika pogwiritsa ntchito zofooka za tsiku lopanda zilolezo. Kuphatikiza apo, zofooka zatsopano mu Edge, Safari, Office 365, Adobe PDF Reader, VMWare Workstation, ndi rauta yopanda zingwe ya D-Link DIR-878 zidagwiritsidwa ntchito bwino panthawi ya mpikisano.

M'masiku awiri a mpikisano, ziwonetsero 28 zogwiritsa ntchito njira zopewera ngozi za tsiku lopanda zilolezo zinayesedwa, 20 mwa izo zinapambana. Gulu la 360Vulcan linakhala lopambana kwambiri, ndipo linapeza $382,000 pa mpikisano wonse, kuphatikizapo $200,000 pa VMWare exploit ndi $80,000 pa kuukira kwa QEMU pamalo obisika. UbuntuMpikisano wa Tianfu Cup unapangidwa pambuyo poti boma la China laletsa ofufuza zachitetezo aku China kutenga nawo mbali m'mipikisano yapadziko lonse yobera mapulogalamu monga Pwn2Own chaka chatha.

Source: opennet.ru