{"action":"created","issue":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/5560","labels_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/5560/labels{/name}","comments_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/5560/comments","events_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/5560/events","html_url":"https://github.com/rapid7/metasploit-framework/pull/5560","id":89359766,"number":5560,"title":"Change ExcellentRanking to GoodRanking for MS14-064","user":{"login":"wchen-r7","id":1170914,"avatar_url":"https://avatars.githubusercontent.com/u/1170914?v=3","gravatar_id":"","url":"https://api.github.com/users/wchen-r7","html_url":"https://github.com/wchen-r7","followers_url":"https://api.github.com/users/wchen-r7/followers","following_url":"https://api.github.com/users/wchen-r7/following{/other_user}","gists_url":"https://api.github.com/users/wchen-r7/gists{/gist_id}","starred_url":"https://api.github.com/users/wchen-r7/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/wchen-r7/subscriptions","organizations_url":"https://api.github.com/users/wchen-r7/orgs","repos_url":"https://api.github.com/users/wchen-r7/repos","events_url":"https://api.github.com/users/wchen-r7/events{/privacy}","received_events_url":"https://api.github.com/users/wchen-r7/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/rapid7/metasploit-framework/labels/module","name":"module","color":"eb6420"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2015-06-18T18:11:33Z","updated_at":"2015-06-19T05:19:59Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/pulls/5560","html_url":"https://github.com/rapid7/metasploit-framework/pull/5560","diff_url":"https://github.com/rapid7/metasploit-framework/pull/5560.diff","patch_url":"https://github.com/rapid7/metasploit-framework/pull/5560.patch"},"body":"The ms14_064_ole_code_execution exploit's ranking is being lowered to GoodRanking because of these two reasons:\r\n\r\n1. The vulnerable component isn't in Internet Explorer. And BES can't check it so the exploit still fires even if the target is patched. This is not the desired behavior.\r\n2. Although rare, we've seen the exploit crashing IE, and since this is a memory curruption type of bug, it should not be in Excellent ranking anyway.\r\n\r\ncc @void-in "},"comment":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/comments/113373579","html_url":"https://github.com/rapid7/metasploit-framework/pull/5560#issuecomment-113373579","issue_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/5560","id":113373579,"user":{"login":"void-in","id":1746697,"avatar_url":"https://avatars.githubusercontent.com/u/1746697?v=3","gravatar_id":"","url":"https://api.github.com/users/void-in","html_url":"https://github.com/void-in","followers_url":"https://api.github.com/users/void-in/followers","following_url":"https://api.github.com/users/void-in/following{/other_user}","gists_url":"https://api.github.com/users/void-in/gists{/gist_id}","starred_url":"https://api.github.com/users/void-in/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/void-in/subscriptions","organizations_url":"https://api.github.com/users/void-in/orgs","repos_url":"https://api.github.com/users/void-in/repos","events_url":"https://api.github.com/users/void-in/events{/privacy}","received_events_url":"https://api.github.com/users/void-in/received_events","type":"User","site_admin":false},"created_at":"2015-06-19T05:19:58Z","updated_at":"2015-06-19T05:19:58Z","body":"@wchen-r7 Yeah. Usually what I do is use only reliable exploits such as this one and ms10_002_aurora for IE exploitation. Rest is only for click testing. So I am completely comfortable with this ranking. "}}