Skip to content

Commit 15f0cf4

Browse files
committed
Land rapid7#5561, @todb-r7's release fixes
2 parents 0f2897d + afcb016 commit 15f0cf4

File tree

2 files changed

+10
-9
lines changed

2 files changed

+10
-9
lines changed

modules/exploits/multi/browser/adobe_flash_pixel_bender_bof.rb

Lines changed: 6 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -17,11 +17,12 @@ def initialize(info={})
1717
This module exploits a buffer overflow vulnerability in Adobe Flash Player. The
1818
vulnerability occurs in the flash.Display.Shader class, when setting specially
1919
crafted data as its bytecode, as exploited in the wild in April 2014. This module
20-
has been tested successfully on:
21-
* Windows 7 SP1, IE 8 to IE 11 with Flash 13.0.0.182.
22-
* Windows 7 SP1, Firefox 38.0.5, Flash 11.7.700.275 and Adobe Flash 13.0.0.182
23-
* Windows 8.1, Firefox 38.0.5 and Adobe Flash 13.0.0.182.
24-
* Linux Mint "Rebecca" (32 bits), Firefox 33.0 and Adobe Flash 11.2.202.350
20+
has been tested successfully on the following operating systems and Flash versions:
21+
22+
Windows 7 SP1, IE 8 to IE 11 with Flash 13.0.0.182,
23+
Windows 7 SP1, Firefox 38.0.5, Flash 11.7.700.275 and Adobe Flash 13.0.0.182,
24+
Windows 8.1, Firefox 38.0.5 and Adobe Flash 13.0.0.182,
25+
Linux Mint "Rebecca" (32 bit), Firefox 33.0 and Adobe Flash 11.2.202.350
2526
},
2627
'License' => MSF_LICENSE,
2728
'Author' =>

modules/exploits/unix/webapp/wp_frontend_editor_file_upload.rb

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -16,10 +16,10 @@ def initialize(info = {})
1616
info,
1717
'Name' => 'Wordpress Front-end Editor File Upload',
1818
'Description' => %q{
19-
The Wordpress Front-end Editor plugin contains an authenticated file upload
20-
vulnerability. We can upload arbitrary files to the upload folder, because
21-
the plugin also uses it's own file upload mechanism instead of the wordpress
22-
api it's possible to upload any file type.
19+
The WordPress Front-end Editor plugin contains an authenticated file upload
20+
vulnerability. An attacker can upload arbitrary files to the upload folder because
21+
the plugin uses its own file upload mechanism instead of the WordPress API, which
22+
incorrectly allows uploads of any file type.
2323
},
2424
'Author' =>
2525
[

0 commit comments

Comments
 (0)