Есть правда некоторая разница:Flash-04 wrote:http://www.pcworld.com/article/2063980/ ... ntest.htmlопа, "remote code execution", даThe vulnerabilities were exploited by a security researcher who uses the pseudonym Pinkie Pie to achieve arbitrary code execution on a Nexus 4 and a Samsung Galaxy S4 device, earning him a prize of $50,000 in the contest.
Following Pinkie Pie’s demonstration, the vulnerabilities were reported to Google, which took less than a day to fix them and push out new patches.
Even though the researcher demonstrated his exploit on Chrome for Android, Google also fixed the vulnerabilities in Chrome for Windows, Mac and Linux, as well as in Chrome Frame plug-in for Internet Explorer.
Маленький секрет, который вовсе не секрет - найденные уязвимости продают не только обратно производителю (Google в данном случае), их ещё продают на "черном рынке", где NSA тоже пасется. Хотя я не удивлюсь если у них есть собственный vulnerability research team.
"The other browser hacked Wednesday at Pwn2Own, Microsoft's Internet Explorer 10 (IE10), has not yet been patched. It's possible, but very unlikely given Microsoft's practices, that a fix will be included in March 12's Patch Tuesday."
и
"The update to Chrome 25 came about 24 hours after two researchers from U.K. firm MWR InfoSecurity exploited multiple bugs in the browser and Windows 7."
