Skip to content

Commit

Permalink
Land #1940 - Update firefox svg exploit description to be more accurate
Browse files Browse the repository at this point in the history
  • Loading branch information
wchen-r7 committed Jun 11, 2013
2 parents 2874aea + 45da645 commit 5dfb3de
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions modules/exploits/multi/browser/firefox_svg_plugin.rb
Original file line number Diff line number Diff line change
Expand Up @@ -17,8 +17,8 @@ def initialize(info = {})
super(update_info(info,
'Name' => 'Firefox 17.0.1 Flash Privileged Code Injection',
'Description' => %q{
This exploit gains remote code execution on Firefox 17.0.1 and all previous
versions, provided the user has installed Flash. No memory corruption is used.
This exploit gains remote code execution on Firefox 17 and 17.0.1, provided
the user has installed Flash. No memory corruption is used.
First, a Flash object is cloned into the anonymous content of the SVG
"use" element in the <body> (CVE-2013-0758). From there, the Flash object
Expand Down

0 comments on commit 5dfb3de

Please sign in to comment.