winners – Pwnies

Best Client-Side Bug

Java Trusted Method Chaining (CVE-2010-0840)

Best Privilege Escalation Bug

Windows NT #GP Trap Handler (CVE-2010-0232 )

Best Server-Side Bug

Apache Struts2 framework remote code execution (CVE-2010-1870)

Best Song

Pwned – 1337 edition

Lamest Vendor Response

LANRev remote code execution

Most Epic Fail

Microsoft Internet Explorer 8 XSS filter

Most Innovative Research

Flash Pointer Inference and JIT Spraying