Update firefox_smil_uaf to use BrowserExploitServer

[wchen-r7]

Description

This updates the firefox_smil_uaf module to use the BrowserExploitServer mixin. Using this mixin allows the exploit to specify which versions of FF it should attack.

Since this exploit was only tested against versions from 38 to 41, this exploit will only target those. Other versions will bail.

Verification

Against a vulnerable FF:

• Set up a Windows box, and install Firefox 38.
• Start msfconsole
• use exploit/windows/browser/firefox_smil_uaf
• Configure the appropriate settings such as SRVHOST, PAYLOAD, LHOST, etc.
• exploit
• Point the vulnerable box to the malicious URL
• The module should attempt to exploit, and ideally obtain a session

Against a non-vulnerable FF:

• Download a non-vulnerable version of FF, such as version 50
• Repeat the msfconsole steps above
• The module should say Exploit requirement(s) not met: ua_ver

[wwebb-r7]

Release Notes

The module exploits/windows/browser/firefox_uaf_smil now uses BrowserExploitServer instead of HttpServer.