VUPEN Pwned Google Chrome aka Sandbox/ASLR/DEP Bypass
Why Information Security Stack Exchange recommends it
Security Stack Exchange answerers link it as concrete proof that a browser can be compromised just by visiting a page, even Chrome with its sandbox.
Recommended by 0 people across 0 different months, 2011 to 2014.
What it is
A 95-second demo from the exploit vendor VUPEN showing a 0-day exploit that runs arbitrary code in Google Chrome while bypassing its sandbox, ASLR and DEP protections. It is a short screen capture with no detailed walkthrough.
What people said
Cites john · 2011-05 · Information Security Stack Exchange · on “Can you get virus just by visiting a website in Chrome?”
Short answer: Yes, you can get a virus just by visiting a site in Chrome or any other browser, with no user-interaction needed ( video demonstration [this video] ). Even with Chrome you are not 100% secure - and you probably never will be with any browser, but Chrome is getting pretty close to it and the security research community seems to agree that at this time, it is the most secure browser you can use. Long answer: Chrome, at this time, is the most secure browser that exists in windows, because of the sandboxing techniques it uses which add up to the security. A good description of this sandbox is here: [LINK] although a bit dated. A more recent and technical one is here: [LINK] The general
Cites Cristian Dobre · 2013-01 · Information Security Stack Exchange · on “How hard it would be to infect a system with malware through a portable web browser”
It doesn't matter where your run your browser from. You can run it off of your USB drive or off a network share, it still goes into system memory. Malware that would exploit that browser would have the privileges of the user that ran the browser. Use Chrome or any other browser to browse to file:///C:/ or about:memory . The browser like any other process, has access to all of your computer, provided the user has access there. If malware breaks through the browser sandboxes and executes code then the malware takes control of the browser and can do whatever it wishes. This is a Chrome exploit in action [this video] (allegedly)
Cites Lucas NN · 2014-12 · Information Security Stack Exchange · on “Screen capture through silent install routed back out port 80”
Has anyone experienced this kind of test? or heard of an exploit that allows this? This is totally possible. A clever attacker can set up a site so that if you click on it even once, within seconds he can take over your computer. Even worse, you might not have to go to his site. If you click a link that leads to his site, he could feasibly "own" your computer. Whenever you visit a Web page, lots of invisible activity can happen on your computer. For example, if the Web site welcomes you with your own name, that's because last time you visited, it put a special text file called a cookie on your computer. If a stock ticker scrolls past or sports scores update automatically, the site could be e