Skip to content

Commit eb972ea

Browse files
committed
Add a maxver for the safari_metadata_archive exploit.
* Apple Security Update 2006-001 (http://support.apple.com/kb/TA23971) * Update applied to 10.4.5, where safari 2.0.3 is default browser. * Because update did not bump Safari version, not all 2.0.3 browsers will be affected.
1 parent 44633c4 commit eb972ea

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

modules/exploits/osx/browser/safari_metadata_archive.rb

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -21,10 +21,10 @@ class Metasploit3 < Msf::Exploit::Remote
2121

2222
include Msf::Exploit::Remote::BrowserAutopwn
2323
autopwn_info({
24-
# Untested. What versions of Safari does this work against?
2524
:ua_name => HttpClients::SAFARI,
25+
:ua_maxver => '2.0.2',
2626
:os_name => [ OperatingSystems::MAC_OSX ],
27-
:javascript => true,
27+
:javascript => false,
2828
:rank => ExcellentRanking, # reliable cmd execution
2929
:vuln_test => nil,
3030
})

0 commit comments

Comments
 (0)