Skip to content

Commit 9c7b446

Browse files
committed
Updates description about default browser setting
1 parent f3421f2 commit 9c7b446

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

modules/exploits/windows/browser/synactis_connecttosynactis_bof.rb

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -36,9 +36,9 @@ def initialize(info={})
3636
class pointer saved on the stack, and results in arbitrary code execution under the
3737
context of the user.
3838
39-
Also note that since the WinExec function is used to call iexplore.exe to launch
40-
an arbitary URL, when the exploit is run, this may also cause another iexplore.exe
41-
to pop up.
39+
Also note that since the WinExec function is used to call the default browser,
40+
you must be aware that: 1) The default must be Internet Explorer, and 2) When the
41+
exploit runs, another browser will pop up.
4242
4343
Synactis PDF In-The-Box is also used by other software such as Logic Print 2013,
4444
which is how the vulnerability was found and publicly disclosed.

0 commit comments

Comments
 (0)