LGPwn

LGPwn LG-Root-Exploit Autor: [email protected] Besonderer Dank: Juggie, für den Hinweis auf eine ungewöhnliche Binärdatei in einem Update spritebud, die mich zu dieser Sicherheitslücke geführt hat. Thema: Race Condition in der Backup-Software von Sprite Software, die vom OEM auf...

Race condition

A Privilege Escalation Vulnerability exists in Sprite Software Spritebud 1.3.24 and 1.3.28 and Backup 2.5.4105 and 2.5.4108 on LG Android smartphones due to a race condition in the spritebud daemon, which could let a local malicious user obtain root privileges...

CVE-2013-3685

CVE-2013-3685 describes a local privilege-escalation via a race condition in Sprite Software’s spritebud daemon (on LG Android smartphones) affecting Spritebud 1.3.24/1.3.28 and Backup 2.5.4105/2.5.4108. The race condition could allow a local attacker to obtain root privileges. Publicly provided ...