The tenth hacker meeting - competition at Pwn2Own 2017 continues with success. The products targeted by the teams included operating systems, web browsers, new Enterprise and server-side applications. The competition is organized by Trend Micro Security and lasts for three days.
Adobe Reader and Apache Web Server were added as targets to the competition by the Pwn2Own 2017 committee.
On the first day of Pwn2Own 2017, teams successfully exploited vulnerabilities in Adobe Reader (twice), Apple Safari (twice), Microsoft Edge, and Ubuntu Desktop. Attacks against Google Chrome and Microsoft Windows failed.
On the second day, the teams managed to hit Adobe Flash (twice), Microsoft Edge (twice), Apple Safari, Mac OS X, Mozilla Firefox, and Windows successfully this time.
Other attacks against Firefox, Windows, Microsoft Edge, Mac OS X, failed, and were blocked.
On the third day we are expected to see three additional attempts against the following targets: Microsoft Edge (twice), and VMWare Workstation.
Pwn2Own 2017 Results so far:
On the operating system side, three different platforms were successfully compromised: Windows, Mac OS X, and Ubuntu Desktop.
On the browser side, Microsoft Edge, Firefox, and Safari were successfully compromised. An attempt against Chrome failed, and a second attack against Firefox also failed. Both Edge and Apple's Safari were exploited multiple times.
On the application side now, Adobe's products, Flash Player and Reader, have been (unsurprisingly) successfully hacked multiple times.
What was surprising was the number of breaches of Edge, which Microsoft lists as the most secure browser.
It should be mentioned that other Chromium-based browsers, such as Vivaldi or Opera, were not among the products that the teams chose to compete.
You can see the videos with the results of the first day below.
Additional information about this year's Pwn2Own competition is available on the TrendMicro Zero Day Initiative blog.
