module

Adobe Flash Player 10.2.153.1 SWF Memory Corruption Vulnerability

Try Surface Command
Back to search
Disclosed
2011-04-11
Created
2018-05-30

Description

This module exploits a vulnerability in Adobe Flash Player that was discovered,
and has been exploited actively in the wild. By embedding a specially crafted .swf
file, Adobe Flash crashes due to an invalid use of an object type, which allows
attackers to overwrite a pointer in memory, and results arbitrary code execution.
Please note for IE 8 targets, Java Runtime Environment must be available on the
victim machine in order to work properly.

Author

sinn3r sinn3r@metasploit.com

Platform

Windows

References

Module Options

To display the available options, load the module within the Metasploit console and run the commands ‘show options’ or ‘show advanced’:


    msf > use exploit/windows/browser/adobe_flashplayer_flash10o
    msf exploit(adobe_flashplayer_flash10o) > show targets
        ...targets...
    msf exploit(adobe_flashplayer_flash10o) > set TARGET < target-id >
    msf exploit(adobe_flashplayer_flash10o) > show options
        ...show and set options...
    msf exploit(adobe_flashplayer_flash10o) > exploit
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today