{"action":"created","issue":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/9226","repository_url":"https://api.github.com/repos/rapid7/metasploit-framework","labels_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/9226/labels{/name}","comments_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/9226/comments","events_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/9226/events","html_url":"https://github.com/rapid7/metasploit-framework/pull/9226","id":275839050,"number":9226,"title":"CVE-2017-11882 Microsoft Office Memory Corruption","user":{"login":"realoriginal","id":30811388,"avatar_url":"https://avatars0.githubusercontent.com/u/30811388?v=4","gravatar_id":"","url":"https://api.github.com/users/realoriginal","html_url":"https://github.com/realoriginal","followers_url":"https://api.github.com/users/realoriginal/followers","following_url":"https://api.github.com/users/realoriginal/following{/other_user}","gists_url":"https://api.github.com/users/realoriginal/gists{/gist_id}","starred_url":"https://api.github.com/users/realoriginal/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/realoriginal/subscriptions","organizations_url":"https://api.github.com/users/realoriginal/orgs","repos_url":"https://api.github.com/users/realoriginal/repos","events_url":"https://api.github.com/users/realoriginal/events{/privacy}","received_events_url":"https://api.github.com/users/realoriginal/received_events","type":"User","site_admin":false},"labels":[{"id":103436215,"url":"https://api.github.com/repos/rapid7/metasploit-framework/labels/docs","name":"docs","color":"941E94","default":false},{"id":103436014,"url":"https://api.github.com/repos/rapid7/metasploit-framework/labels/module","name":"module","color":"eb6420","default":false}],"state":"open","locked":false,"assignee":{"login":"wwebb-r7","id":16786368,"avatar_url":"https://avatars3.githubusercontent.com/u/16786368?v=4","gravatar_id":"","url":"https://api.github.com/users/wwebb-r7","html_url":"https://github.com/wwebb-r7","followers_url":"https://api.github.com/users/wwebb-r7/followers","following_url":"https://api.github.com/users/wwebb-r7/following{/other_user}","gists_url":"https://api.github.com/users/wwebb-r7/gists{/gist_id}","starred_url":"https://api.github.com/users/wwebb-r7/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/wwebb-r7/subscriptions","organizations_url":"https://api.github.com/users/wwebb-r7/orgs","repos_url":"https://api.github.com/users/wwebb-r7/repos","events_url":"https://api.github.com/users/wwebb-r7/events{/privacy}","received_events_url":"https://api.github.com/users/wwebb-r7/received_events","type":"User","site_admin":false},"assignees":[{"login":"wwebb-r7","id":16786368,"avatar_url":"https://avatars3.githubusercontent.com/u/16786368?v=4","gravatar_id":"","url":"https://api.github.com/users/wwebb-r7","html_url":"https://github.com/wwebb-r7","followers_url":"https://api.github.com/users/wwebb-r7/followers","following_url":"https://api.github.com/users/wwebb-r7/following{/other_user}","gists_url":"https://api.github.com/users/wwebb-r7/gists{/gist_id}","starred_url":"https://api.github.com/users/wwebb-r7/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/wwebb-r7/subscriptions","organizations_url":"https://api.github.com/users/wwebb-r7/orgs","repos_url":"https://api.github.com/users/wwebb-r7/repos","events_url":"https://api.github.com/users/wwebb-r7/events{/privacy}","received_events_url":"https://api.github.com/users/wwebb-r7/received_events","type":"User","site_admin":false}],"milestone":null,"comments":4,"created_at":"2017-11-21T19:52:20Z","updated_at":"2017-12-01T03:05:19Z","closed_at":null,"author_association":"CONTRIBUTOR","pull_request":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/pulls/9226","html_url":"https://github.com/rapid7/metasploit-framework/pull/9226","diff_url":"https://github.com/rapid7/metasploit-framework/pull/9226.diff","patch_url":"https://github.com/rapid7/metasploit-framework/pull/9226.patch"},"body":"PR adds the recent `CVE-2017-11882`  vulneralbility which allows code execution as the user opening the document. Different than PoC from Embedi, allows more space. \r\n\r\n## Verification\r\n\r\nList the steps needed to make sure this thing works\r\n\r\n- [ ] `msfconsole`\r\n- [ ] `use exploit/windows/fileformat/office_ms17_11882`\r\n- [ ] `set PAYLOAD [PAYLOAD]`\r\n- [ ] `set FILENAME /path/to/file.rtf`\r\n- [ ] `run`\r\n\r\nShould obtain shell. \r\n\r\n\r\n## Tested \r\nTested on MS Office 2010 SP 2 Windows 7 \r\n\r\n\r\n\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/comments/348388865","html_url":"https://github.com/rapid7/metasploit-framework/pull/9226#issuecomment-348388865","issue_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/9226","id":348388865,"user":{"login":"realoriginal","id":30811388,"avatar_url":"https://avatars0.githubusercontent.com/u/30811388?v=4","gravatar_id":"","url":"https://api.github.com/users/realoriginal","html_url":"https://github.com/realoriginal","followers_url":"https://api.github.com/users/realoriginal/followers","following_url":"https://api.github.com/users/realoriginal/following{/other_user}","gists_url":"https://api.github.com/users/realoriginal/gists{/gist_id}","starred_url":"https://api.github.com/users/realoriginal/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/realoriginal/subscriptions","organizations_url":"https://api.github.com/users/realoriginal/orgs","repos_url":"https://api.github.com/users/realoriginal/repos","events_url":"https://api.github.com/users/realoriginal/events{/privacy}","received_events_url":"https://api.github.com/users/realoriginal/received_events","type":"User","site_admin":false},"created_at":"2017-12-01T03:05:19Z","updated_at":"2017-12-01T03:05:19Z","author_association":"CONTRIBUTOR","body":"All good . I should have some time tommorow morning to do it"}}
{"actor":{"display_login":"realoriginal"}}