IE9 Safe from Pwn2Own 2011 'IE8 Vulnerability Attacks' - Free T-Shirts at SXSW 2011, Austin

Microsoft said that the soon-to-be-released Internet Explorer 9 is safe from the type of attack used to hack its predecessor, Internet Explorer 8 at the Pwn2Own 2011 hack contest at CanSecWest."The IE8 attack was designed to exploit the chain of vulnerabilities, which allowed the researcher to first of all bypass two critical mitigations layers in […]

Microsoft said that the soon-to-be-released Internet Explorer 9 is safe from the type of attack used to hack its predecessor, Internet Explorer 8 at the Pwn2Own 2011 hack contest at CanSecWest.

"The IE8 attack was designed to exploit the chain of vulnerabilities, which allowed the researcher to first of all bypass two critical mitigations layers in IE8 and Windows, namely Data Execution Prevention (DEP) and Address Space Layout Randomization (ASLR).

Only after he circumvented DEP and ASLR did Fewer needed to deal with IE8's sandbox, with the browser running with Protect Mode and User Account Control (UAC) enabled."

On March 10, 2010, Microsoft's Security Response team tweeted: "We are on the ground at CanSecWest and our top security researchers are already investigating the IE exploit used in the pwn2own contest."

And then, the following tweet was posted: "We have confirmed that IE 9 RC is not affected by the vulnerability used in the pwn2own contest. IE 9 officially releases on Monday."

Also, in a seperate blog post on Windows blog, Microsoft announced of giving away free limited-edition t-shirts -- one per day from the 11th through the 15th. IE9 is launching on March 15th at SXSW 2011.

IE9 t-shirts at sxsw 2011

Microsoft Scott Armstrong said, "Finally, we've got an incredible party planned for Monday night. You will not want to be stuck in line. Twitter will be the place to go again, to get this: the Fast Access pass. This will let you bypass the line and walk right into the concert whenever you get there. We'll have 25 of these we'll give away per day the 11th through the 14th."

[Source]