Skip to content

Commit 5dfb3de

Browse files
committed
Land rapid7#1940 - Update firefox svg exploit description to be more accurate
2 parents 2874aea + 45da645 commit 5dfb3de

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

modules/exploits/multi/browser/firefox_svg_plugin.rb

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -17,8 +17,8 @@ def initialize(info = {})
1717
super(update_info(info,
1818
'Name' => 'Firefox 17.0.1 Flash Privileged Code Injection',
1919
'Description' => %q{
20-
This exploit gains remote code execution on Firefox 17.0.1 and all previous
21-
versions, provided the user has installed Flash. No memory corruption is used.
20+
This exploit gains remote code execution on Firefox 17 and 17.0.1, provided
21+
the user has installed Flash. No memory corruption is used.
2222
2323
First, a Flash object is cloned into the anonymous content of the SVG
2424
"use" element in the <body> (CVE-2013-0758). From there, the Flash object

0 commit comments

Comments
 (0)