Skip to content

Commit b96dac2

Browse files
author
Austin
authored
fix info segment
1 parent b7f17f5 commit b96dac2

File tree

1 file changed

+4
-5
lines changed

1 file changed

+4
-5
lines changed

modules/exploits/windows/fileformat/office_ms17_11882.rb

Lines changed: 4 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -16,11 +16,10 @@ def initialize(info = {})
1616
super(update_info(info,
1717
'Name' => 'Microsoft Office CVE-2017-11882',
1818
'Description' => %q{
19-
Module exploits a flaw in the Equation Editor, developed
20-
in 2000, that allowed any OLE object to execute in a separate
21-
address space. Compared to original PoC, allows for a command within
22-
a length of 109 bytes to be executed Affects Microsoft Office word for the latest
23-
17 years.
19+
Module exploits a flaw in how the Equation Editor that
20+
allows an attacker to execute arbitrary code in RTF files without
21+
interaction. The vulnerability is caused by the Equation Editor,
22+
to which fails to properly handle OLE objects in memory.
2423
},
2524
'Author' => ['mumbai', 'embedi'],
2625
'License' => MSF_LICENSE,

0 commit comments

Comments
 (0)