Skip to content

Commit b99fc06

Browse files
jvazquez-r7wchen-r7
authored andcommitted
description updated
1 parent 19f2e72 commit b99fc06

File tree

1 file changed

+5
-4
lines changed

1 file changed

+5
-4
lines changed

modules/exploits/multi/browser/java_jre17_reflection_types.rb

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -22,10 +22,11 @@ def initialize( info = {} )
2222
super( update_info( info,
2323
'Name' => 'Java Applet Reflection Type Confusion Remote Code Execution',
2424
'Description' => %q{
25-
This module abuses Java Reflection to generate a Type Confusion and run code
26-
outside of the Java Sandbox. The vulnerability affects Java version 7u17 and earlier.
27-
This exploit doesn't bypass click-to-play, so the user must accept the java warning
28-
in order to run the malicious applet.
25+
This module abuses Java Reflection to generate a Type Confusion, due to a weak
26+
access control when setting final fields on static classes, and run code outside of
27+
the Java Sandbox. The vulnerability affects Java version 7u17 and earlier. This
28+
exploit doesn't bypass click-to-play, so the user must accept the java warning in
29+
order to run the malicious applet.
2930
},
3031
'License' => MSF_LICENSE,
3132
'Author' =>

0 commit comments

Comments
 (0)