rapid7/metasploit-framework

View on GitHub
modules/exploits/windows/browser/ms06_001_wmf_setabortproc.rb

Summary

Maintainability
A
3 hrs
Test Coverage

Method initialize has 44 lines of code (exceeds 25 allowed). Consider refactoring.
Open

  def initialize(info = {})
    super(update_info(info,
      'Name'           => 'Windows XP/2003/Vista Metafile Escape() SetAbortProc Code Execution',
      'Description'    => %q{
          This module exploits a vulnerability in the GDI library included with
Severity: Minor
Found in modules/exploits/windows/browser/ms06_001_wmf_setabortproc.rb - About 1 hr to fix

    Method generate_metafile has 34 lines of code (exceeds 25 allowed). Consider refactoring.
    Open

      def generate_metafile(payload)
    
        # Minimal length values before and after the Escape record
        pre_mlen = 1440 + rand(8192)
        suf_mlen = 128  + rand(8192)
    Severity: Minor
    Found in modules/exploits/windows/browser/ms06_001_wmf_setabortproc.rb - About 1 hr to fix

      There are no issues that match your filters.

      Category
      Status