Pwn2Own 2018 – Day Two Schedule
March 15, 2018 | Dustin ChildsWelcome back to the second and final day of this year’s contest. We have three competitors scheduled for today targeting Mozilla FireFox and Apple Safari. Yesterday saw $162,000 USD awarded, and $170,000 is up for grabs today.
The full schedule for Day Two is below (all times PDT). We will update this schedule with results as they become available.
Day Two – March 15, 2018
1000 – Richard Zhu (fluorescence) targeting Mozilla Firefox with a Windows kernel EoP
Success: Richard used an Out-of-Bounds (OOB) write in the browser followed by an integer overflow in the Windows kernel to earn himself another $50,000 and 5 more Master of Pwn points.
1200 – Markus Gaasedelen, Nick Burnett, Patrick Biernat of Ret2 Systems, Inc. targeting Apple Safari with a macOS kernel EoP
Failure: The contestant could not get his exploit working within the time allotted.
1400 – MWR Labs - Alex Plaskett (AlaxJPlaskett), Georgi Geshev (munmap), Fabi Beterke (pwnfl4k3s) targeting Apple Safari with a sandbox escape
Success: The team used two vulnerabilities to exploit Safari and escape the sandbox. They earned themselves $55,000 and 5 Master of Pwn points.
As always, we’ll provide updates here throughout the day and recap the day’s events in a separate blog. You can also find the latest results by following our Twitter feed. Best of luck to all of our contestants!