Exploitation Summary
EIP tracks 3 public exploits for CVE-2011-1774.
PoCs published by Metasploit, Nicolas Gregoire, including Metasploit module auxiliary/server/webkit_xslt_dropper.
AI-analyzed exploit summary This Metasploit module exploits a file creation vulnerability in WebKit's libxslt (CVE-2011-1774) by redirecting XSLT transformation output to arbitrary files. It achieves RCE by uploading a VBS payload and a MOF file to trigger Windows Management Instrumentation execution.
Description
WebKit in Apple Safari before 5.0.6 has improper libxslt security settings, which allows remote attackers to create arbitrary files, and consequently execute arbitrary code, via a crafted web site. NOTE: this may overlap CVE-2011-1425.
Exploits (3)
This Metasploit module exploits a file creation vulnerability in WebKit's libxslt (CVE-2011-1774) by redirecting XSLT transformation output to arbitrary files. It achieves RCE by uploading a VBS payload and a MOF file to trigger Windows Management Instrumentation execution.
This Metasploit module exploits CVE-2011-1774, a WebKit XSLT vulnerability, to drop arbitrary files on the target filesystem. It serves an XML payload with embedded XSLT that writes user-specified content to a specified path.
This Metasploit module exploits CVE-2011-1774, a file creation vulnerability in WebKit's libxslt, by redirecting XSLT transformation output to arbitrary files. It achieves RCE by uploading a VBS payload and a MOF file to trigger Windows Management Instrumentation execution.