Update vulnerable versions to include 6.x (legacy)

2016-05-05 02:25:12 -05:00 · 2016-05-05 02:25:12 -05:00 · 1bc2ec9c11
parent 334c432901
commit 1bc2ec9c11
1 changed files with 2 additions and 1 deletions
--- a/modules/exploits/unix/fileformat/imagemagick_delegate.rb
+++ b/modules/exploits/unix/fileformat/imagemagick_delegate.rb
@ -14,7 +14,8 @@ class MetasploitModule < Msf::Exploit
      'Name'            => 'ImageMagick Delegate Arbitrary Command Execution',
      'Description'     => %q{
        This module exploits a shell command injection in the way "delegates"
-        (commands for converting files) are processed in ImageMagick <= 7.0.1-0.
+        (commands for converting files) are processed in ImageMagick versions
+        <= 7.0.1-0 and <= 6.9.3-9 (legacy).

        Since ImageMagick uses file magic to detect file format, you can create
        a .png (for example) which is actually a crafted SVG (for example) that