> Untouched at least year's pwn2own That's so '11... ;-) > Team VUPEN: 0day: Google Chrome: Full sandbox escape and code execution http://pwn2own.zerodayinit

> Untouched at least year's pwn2own That's so '11... ;-) > Team VUPEN: 0day: Google Chrome: Full sandbox escape and code execution http://pwn2own.zerodayinitiative.com/status.html http://pwn2own.zerodayinitiative.com/status.html Safari was apparently the only one without a 0day, though exploited via CVE-2011-0115 and CVE-2010-0050, weird since the former is patched since 5.0.4 [0] and the latter is fixed in iOS 3.1.3 [1] and Safari 4.0.5 [2]. Aren't they supposed to target fully patched, latest OSes and browsers? [0] http://support.apple.com/kb/HT4566 http://support.apple.com/kb/HT4566 [1] http://support.apple.com/kb/HT4225 http://support.apple.com/kb/HT4225 [2] http://support.apple.com/kb/HT4070 http://support.apple.com/kb/HT4070