BadUpdate works on all revisions. It's just not persistent.

With BadAvatar you get interactionless console exploitation that's good enough for most people.