File tree Expand file tree Collapse file tree 1 file changed +4
-5
lines changed
modules/exploits/windows/fileformat Expand file tree Collapse file tree 1 file changed +4
-5
lines changed Original file line number Diff line number Diff line change @@ -16,11 +16,10 @@ def initialize(info = {})
16
16
super ( update_info ( info ,
17
17
'Name' => 'Microsoft Office CVE-2017-11882' ,
18
18
'Description' => %q{
19
- Module exploits a flaw in the Equation Editor, developed
20
- in 2000, that allowed any OLE object to execute in a separate
21
- address space. Compared to original PoC, allows for a command within
22
- a length of 109 bytes to be executed Affects Microsoft Office word for the latest
23
- 17 years.
19
+ Module exploits a flaw in how the Equation Editor that
20
+ allows an attacker to execute arbitrary code in RTF files without
21
+ interaction. The vulnerability is caused by the Equation Editor,
22
+ to which fails to properly handle OLE objects in memory.
24
23
} ,
25
24
'Author' => [ 'mumbai' , 'embedi' ] ,
26
25
'License' => MSF_LICENSE ,
You can’t perform that action at this time.
0 commit comments