Lucene search

MitreCVE-2013-5933

HistorySep 25, 2013 - 10:31 a.m.

CVE-2013-5933

2013-09-2510:31:29

CWE-119

mitre

web.nvd.nist.gov

cve-2013-5933

buffer overflow

android 2.3.7

motorola defy xt

nvd

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

20.0%

JSON

Stack-based buffer overflow in the sub_E110 function in init in a certain configuration of Android 2.3.7 on the Motorola Defy XT phone for Republic Wireless allows local users to gain privileges or cause a denial of service (memory corruption) by writing a long string to the /dev/socket/init_runit socket that is inconsistent with a certain length value that was previously written to this socket.

Affected configurations

Nvd

Node

googleandroidMatch2.3.7

AND

motoroladefy_xtMatch------

VendorProductVersionCPE
googleandroid2.3.7cpe:2.3:o:google:android:2.3.7:*:*:*:*:*:*:*
motoroladefy_xt-cpe:2.3:h:motorola:defy_xt:-:-:-:*:-:-:-:republic_wireless

Vendor	Product	Version	CPE
google	android	2.3.7	cpe:2.3:o:google:android:2.3.7:::::::*
motorola	defy_xt	-	cpe:2.3:h:motorola:defy_xt:-:-:-:*:-:-:-:republic_wireless

References

twitter.com/djrbliss/statuses/382632926946402304

plus.google.com/110348415484169880343/posts/5ofgPNrSu3J

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

20.0%

JSON

Related for CVE-2013-5933