Blog

Pwn2Own 2018 – Day Two Schedule

March 15, 2018
Dustin Childs

Welcome back to the second and final day of this year’s contest. We have three competitors scheduled for today targeting Mozilla FireFox and Apple Safari. Yesterday saw $162,000 USD awarded, and $170,000 is up for grabs today.

The full schedule for Day Two is below (all times PDT). We will update this schedule with results as they become available.

 Day Two – March 15, 2018

1000 – Richard Zhu (fluorescence) targeting Mozilla Firefox with a Windows kernel EoP

Success: Richard used an Out-of-Bounds (OOB) write in the browser followed by an integer overflow in the Windows kernel to earn himself another $50,000 and 5 more Master of Pwn points.

1200 – Markus Gaasedelen, Nick Burnett, Patrick Biernat of Ret2 Systems, Inc. targeting Apple Safari with a macOS kernel EoP

Failure: The contestant could not get his exploit working within the time allotted.

1400 – MWR Labs - Alex Plaskett (AlaxJPlaskett), Georgi Geshev (munmap), Fabi Beterke (pwnfl4k3s) targeting Apple Safari with a sandbox escape

Success: The team used two vulnerabilities to exploit Safari and escape the sandbox. They earned themselves $55,000 and 5 Master of Pwn points.

As always, we’ll provide updates here throughout the day and recap the day’s events in a separate blog. You can also find the latest results by following our Twitter feed. Best of luck to all of our contestants!

Hero Background

Stand at the front line of proactive security

Trend ZDI connects the experts who discover, remediate, and defend.
Add your voice to the work that pushes attackers back.