Skip to content

Commit 13a3f27

Browse files
committed
Change ExcellentRanking to GoodRanking for MS14-064
The ms14_064_ole_code_execution exploit's ranking is being lowered to GoodRanking because of these two reasons: 1. The vulnerable component isn't in Internet Explorer. And BES can't check it so the exploit still fires even if the target is patched. 2. Although rare, we've seen the exploit crashing IE, and since this is a memory curruption type of bug, it should not be in Excellent ranking anyway.
1 parent 0f2897d commit 13a3f27

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

modules/exploits/windows/browser/ms14_064_ole_code_execution.rb

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@
88
require 'msf/core/exploit/powershell'
99

1010
class Metasploit4 < Msf::Exploit::Remote
11-
Rank = ExcellentRanking
11+
Rank = GoodRanking
1212

1313
include Msf::Exploit::Remote::BrowserExploitServer
1414
include Msf::Exploit::EXE

0 commit comments

Comments
 (0)