LGPwn

LGPwn LG-Root-Exploit Autor: [email protected] Besonderer Dank: Juggie, für den Hinweis auf eine ungewöhnliche Binärdatei in einem Update spritebud, die mich zu dieser Sicherheitslücke geführt hat. Thema: Race Condition in der Backup-Software von Sprite Software, die vom OEM auf...

CVE-2013-3685

A Privilege Escalation Vulnerability exists in Sprite Software Spritebud 1.3.24 and 1.3.28 and Backup 2.5.4105 and 2.5.4108 on LG Android smartphones due to a race condition in the spritebud daemon, which could let a local malicious user obtain root privileges...

CVE-2013-3685

CVE-2013-3685 describes a local privilege-escalation via a race condition in Sprite Software’s spritebud daemon (on LG Android smartphones) affecting Spritebud 1.3.24/1.3.28 and Backup 2.5.4105/2.5.4108. The race condition could allow a local attacker to obtain root privileges. Publicly provided ...

Sprite Software Android Race Condition

Subject: Race condition in Sprite Software's backup software, installed by OEM on LG Android devices. CVE ID: CVE-2013-3685 Initial disclosure: https://plus.google.com/110348415484169880343/posts/Me2yea2PgwE Source: https://github.com/CunningLogic/LGPwn Effect: Locally exploited vulnerability wit...