infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

update to ie_execcommand_uaf's info to add ROP info 

This module requires the following dependencies on the target for the
ROP chain to function.  For WinXP SP3 with IE8, msvcrt must be present
(which it is on default installs).  For Vista/Win7 with IE8 or Win7
with IE9, ire 1.6.x or below must be installed.
unstable
kernelsmith 2012-09-19 14:10:02 -05:00
parent c19e9a8053
commit f1a39c76ed
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
modules/exploits/windows/browser/ie_execcommand_uaf.rb
View File

@ -30,6 +30,10 @@ class Metasploit3 < Msf::Exploit::Remote
to a use-after-free condition. Please note that this vulnerability has to a use-after-free condition. Please note that this vulnerability has
been exploited in the wild since Sep 14 2012, and there is currently no official been exploited in the wild since Sep 14 2012, and there is currently no official
patch for it. patch for it.
This module requires the following dependencies on the target for the ROP chain to function.
For WinXP SP3 with IE8, msvcrt must be present (which it is on default installs). For
Vista/Win7 with IE8 or Win7 with IE9, jre 1.6.x or below must be installed.
}, },
'License' => MSF_LICENSE, 'License' => MSF_LICENSE,
'Author' => 'Author' =>