Metasploit mailing list archives

IE/WMP 0-day, German Opcodes, MSF3


From: hdm at metasploit.com (H D Moore)
Date: Tue, 27 Dec 2005 21:28:14 -0600

Er, woops, this vulnerability is in the Windows Picture and Fax Viewer 
found in Windows XP. I am blaming lack of sleep :-) The correct module 
name is 'ie_xp_pfv_metafile' and the URL is:

-http://metasploit.com/projects/Framework/exploits.html#ie_xp_pfv_metafile

-HD

On Tuesday 27 December 2005 20:44, H D Moore wrote:
Hello,

I just ported the (new?) ".wmf" overflow to the Metasploit Framework
(2.x). This seems to be an unpatched overflow in Windows Media Player
8.x and above. I tested this module against Win XP SP1 and SP2. The
module name is 'ie_wmpwmf' and it is available through msfupdate or the
latest 2.5 snapshot.



Current thread: