Redo description
parent
aaabd23707
commit
0e4e264325
|
@ -18,10 +18,12 @@ class Metasploit3 < Msf::Exploit::Remote
|
|||
super(update_info(info,
|
||||
'Name' => 'Microsoft Windows Shell LNK Code Execution',
|
||||
'Description' => %q{
|
||||
This module exploits a vulnerability in the handling of Windows
|
||||
Shortcut files (.LNK) that contain an icon resource pointing to a
|
||||
malicious DLL. This module creates a WebDAV service that can be used
|
||||
to run an arbitrary payload when accessed as a UNC path.
|
||||
This module exploits a vulnerability in the MS10-046 patch to abuse (again) the handling
|
||||
of Windows Shortcut files (.LNK) that contain an icon resource pointing to a malicious
|
||||
DLL. This module creates the required files to exploit the vulnerability. They must be
|
||||
uploaded to an UNC path accessible by the target. This module has been tested successfully
|
||||
on Windows 2003 SP2 with MS10-046 installed and Windows 2008 SP2 (32 bits) with MS14-027
|
||||
installed.
|
||||
},
|
||||
'Author' =>
|
||||
[
|
||||
|
|
Loading…
Reference in New Issue