Skip to content

Commit d30688b

Browse files
committed
Add more requirement info
1 parent d9aacf2 commit d30688b

File tree

1 file changed

+9
-2
lines changed

1 file changed

+9
-2
lines changed

modules/exploits/multi/browser/adobe_flash_hacking_team_uaf.rb

Lines changed: 9 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -19,8 +19,10 @@ def initialize(info={})
1919
described as an Use After Free while handling ByteArray objects. This module has
2020
been tested successfully on:
2121
22+
Windows XP, Chrome 43 and Adobe Flash 18.0.0.194,
2223
Windows 7 SP1 (32-bit), IE11 and Adobe Flash 18.0.0.194,
2324
Windows 7 SP1 (32-bit), Firefox 38.0.5 and Adobe Flash 18.0.0.194,
25+
Windows 8.1 (32-bit), Firefox and Adobe Flash 18.0.0.194,
2426
Linux Mint "Rebecca" (32 bits), Firefox 33.0 and Adobe Flash 11.2.202.468.
2527
},
2628
'License' => MSF_LICENSE,
@@ -46,12 +48,15 @@ def initialize(info={})
4648
:arch => ARCH_X86,
4749
:os_name => lambda do |os|
4850
os =~ OperatingSystems::Match::LINUX ||
49-
os =~ OperatingSystems::Match::WINDOWS_7
51+
os =~ OperatingSystems::Match::WINDOWS_7 ||
52+
os =~ OperatingSystems::Match::WINDOWS_81 ||
53+
os =~ OperatingSystems::Match::WINDOWS_VISTA ||
54+
os =~ OperatingSystems::Match::WINDOWS_XP
5055
end,
5156
:ua_name => lambda do |ua|
5257
case target.name
5358
when 'Windows'
54-
return true if ua == Msf::HttpClients::IE || ua == Msf::HttpClients::FF
59+
return true if ua == Msf::HttpClients::IE || ua == Msf::HttpClients::FF || ua == Msf::HttpClients::CHROME
5560
when 'Linux'
5661
return true if ua == Msf::HttpClients::FF
5762
end
@@ -61,6 +66,8 @@ def initialize(info={})
6166
:flash => lambda do |ver|
6267
case target.name
6368
when 'Windows'
69+
# Note: Chrome might be vague about the version.
70+
# Instead of 18.0.0.203, it just says 18.0
6471
return true if ver =~ /^18\./ && Gem::Version.new(ver) <= Gem::Version.new('18.0.0.194')
6572
when 'Linux'
6673
return true if ver =~ /^11\./ && Gem::Version.new(ver) <= Gem::Version.new('11.2.202.468')

0 commit comments

Comments
 (0)