Lucene search

[email protected]CVE-2013-3685

HistoryFeb 12, 2020 - 4:15 p.m.

CVE-2013-3685

2020-02-1216:15:10

CWE-362

[email protected]

web.nvd.nist.gov

cve-2013-3685

privilege escalation

sprite software

spritebud

android

vulnerability

race condition

daemon

root privileges

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

7 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.1%

JSON

A Privilege Escalation Vulnerability exists in Sprite Software Spritebud 1.3.24 and 1.3.28 and Backup 2.5.4105 and 2.5.4108 on LG Android smartphones due to a race condition in the spritebud daemon, which could let a local malicious user obtain root privileges.

Affected configurations

NVD

Node

spritesoftwarespritebackupMatch2.5.4105

spritesoftwarespritebackupMatch2.5.4108

spritesoftwarespritebudMatch1.3.24

spritesoftwarespritebudMatch1.3.28

AND

lge971Match-

lge973Match-

lge975Match-

lge975kMatch-

lge975tMatch-

lge976Match-

lge977Match-

lgf100kMatch-

lgf100lMatch-

lgf100sMatch-

lgf120kMatch-

lgf120lMatch-

lgf120sMatch-

lgf160kMatch-

lgf160lMatch-

lgf160lvMatch-

lgf160sMatch-

lgf180kMatch-

lgf180lMatch-

lgf180sMatch-

lgf200kMatch-

lgf200lMatch-

lgf200sMatch-

lgf240kMatch-

lgf240lMatch-

lgf240sMatch-

lgf260kMatch-

lgf260lMatch-

lgf260sMatch-

lgl21_Match-

lglg870Match-

lgls860Match-

lgls970Match-

lgp760Match-

lgp769Match-

lgp780Match-

lgp875Match-

lgp875hMatch-

lgp880Match-

lgp940Match-

lgsu540Match-

lgsu870Match-

lgus780Match-

CPENameOperatorVersion
spritesoftware:spritebackupspritesoftware spritebackupeq2.5.4105
spritesoftware:spritebackupspritesoftware spritebackupeq2.5.4108
spritesoftware:spritebudspritesoftware spritebudeq1.3.24
spritesoftware:spritebudspritesoftware spritebudeq1.3.28

CPE	Name	Operator	Version
spritesoftware:spritebackup	spritesoftware spritebackup	eq	2.5.4105
spritesoftware:spritebackup	spritesoftware spritebackup	eq	2.5.4108
spritesoftware:spritebud	spritesoftware spritebud	eq	1.3.24
spritesoftware:spritebud	spritesoftware spritebud	eq	1.3.28

References

www.securityfocus.com/bid/60749

androidvulnerabilities.org/all

exchange.xforce.ibmcloud.com/vulnerabilities/85296

seclists.org/fulldisclosure/2013/Jun/196

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

7 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.1%

JSON

Related for CVE-2013-3685

packetstorm1 cvelist1 nvd1 prion1 android1