Charlie Miller has hacked into a MacBook by exploiting a critical Safari browser vulnerability. Miller performed a clean drive-by download against Safari to get a full command shell on the MacBook. Details of the vulnerability are being kept under wraps until Apple releases a fix. Miller, who uses fuzzers to find security vulnerabilities, is slated to deliver a conference presentation on fuzzing techniques against popular software products at the CanSecWest Pwn2Own hacker contest in Vancouver, Canada, this week. TippingPoint Zero Day Initiative (ZDI) will handle the process of reporting the issue to Apple.
Source: https://threatpost.com/pwn2own-safari-attack-charlie-miller-hijacks-macbook-032410/73738/

