Skip to content

Commit b574a4c

Browse files
committed
Wow, this gets a shell all the way back to 15.0.
1 parent 5706371 commit b574a4c

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

modules/exploits/multi/browser/firefox_tostring_console_injection.rb

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ class Metasploit3 < Msf::Exploit::Remote
1414

1515
autopwn_info({
1616
:ua_name => HttpClients::FF,
17-
:ua_minver => "21.0",
17+
:ua_minver => "15.0",
1818
:ua_maxver => "23.0",
1919
:javascript => true,
2020
:rank => ExcellentRanking
@@ -24,7 +24,7 @@ def initialize(info = {})
2424
super(update_info(info,
2525
'Name' => 'Firefox toString console.time Privileged Javascript Injection',
2626
'Description' => %q{
27-
This exploit gains remote code execution on Firefox 21-23 by abusing two separate
27+
This exploit gains remote code execution on Firefox 15-23 by abusing two separate
2828
Javascript-related vulnerabilities to ultimately inject malicious Javascript code
2929
into a context running with chrome:// privileges.
3030
},
@@ -55,7 +55,7 @@ def initialize(info = {})
5555
'BrowserRequirements' => {
5656
:source => 'script',
5757
:ua_name => HttpClients::FF,
58-
:ua_ver => lambda { |ver| ver.to_i.between?(21, 23) }
58+
:ua_ver => lambda { |ver| ver.to_i.between?(15, 23) }
5959
}
6060
))
6161

0 commit comments

Comments
 (0)