diff --git a/modules/exploits/multi/browser/firefox_svg_plugin.rb b/modules/exploits/multi/browser/firefox_svg_plugin.rb index f196bfffd0..6cb7b6ea70 100644 --- a/modules/exploits/multi/browser/firefox_svg_plugin.rb +++ b/modules/exploits/multi/browser/firefox_svg_plugin.rb @@ -17,8 +17,8 @@ class Metasploit3 < Msf::Exploit::Remote super(update_info(info, 'Name' => 'Firefox 17.0.1 Flash Privileged Code Injection', 'Description' => %q{ - This exploit gains remote code execution on Firefox 17.0.1 and all previous - versions, provided the user has installed Flash. No memory corruption is used. + This exploit gains remote code execution on Firefox 17 and 17.0.1, provided + the user has installed Flash. No memory corruption is used. First, a Flash object is cloned into the anonymous content of the SVG "use" element in the (CVE-2013-0758). From there, the Flash object