CVE-2011-1774

Related Files

Cross Platform Webkit File Dropper

Posted Aug 31, 2024

Authored by Jay Turla | Site metasploit.com

This Metasploit module exploits a XSLT vulnerability in Webkit to drop ASCII or UTF-8 files to the target file-system. By default, the file will be dropped in C:\Program Files\.

tags | exploit

advisories | CVE-2011-1774

SHA-256 | 6fc00a5d0a34ed8919d52e26937634aaf7a33e0dd01fe9fb207040a6b2066f72

Download | Favorite | View

Apple Safari Webkit libxslt Arbitrary File Creation

Posted Oct 18, 2011

Authored by Nicolas Gregoire | Site metasploit.com

This Metasploit module exploits a file creation vulnerability in the Webkit rendering engine. It is possible to redirect the output of a XSLT transformation to an arbitrary file. The content of the created file must be ASCII or UTF-8. The destination path can be relative or absolute. This Metasploit module has been tested on Safari and Maxthon. Code execution can be achieved by first uploading the payload to the remote machine in VBS format, and then upload a MOF file, which enables Windows Management Instrumentation service to execute the VBS.

tags | exploit, remote, arbitrary, code execution

systems | windows

advisories | CVE-2011-1774, OSVDB-74017

SHA-256 | c3cc069840b33d66dc0f5eb936fd86d7c0e81a9ca3077cb540669d0523d716eb

Download | Favorite | View