We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
2 parents 2874aea + 45da645 commit 5dfb3deCopy full SHA for 5dfb3de
modules/exploits/multi/browser/firefox_svg_plugin.rb
@@ -17,8 +17,8 @@ def initialize(info = {})
17
super(update_info(info,
18
'Name' => 'Firefox 17.0.1 Flash Privileged Code Injection',
19
'Description' => %q{
20
- This exploit gains remote code execution on Firefox 17.0.1 and all previous
21
- versions, provided the user has installed Flash. No memory corruption is used.
+ This exploit gains remote code execution on Firefox 17 and 17.0.1, provided
+ the user has installed Flash. No memory corruption is used.
22
23
First, a Flash object is cloned into the anonymous content of the SVG
24
"use" element in the <body> (CVE-2013-0758). From there, the Flash object
0 commit comments