PT-2013-5873 · Motorola+1 · Motorola Defy Xt+1

Publicado 2013-09-25 · Atualizado 2013-09-25 · CVE-2013-5933

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Android version 2.3.7 on Motorola Defy XT phone

Description A stack-based buffer overflow issue exists in a certain configuration of the affected device, allowing local users to potentially gain privileges or cause a denial of service due to memory corruption. This occurs when a long string is written to the /dev/socket/init runit socket, which is inconsistent with a previously written length value to this socket.

Recommendations For Android version 2.3.7 on Motorola Defy XT phone, consider restricting access to the /dev/socket/init runit socket to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2013-5933

Produtos afetados

Android

Motorola Defy Xt

Referências · 3

• http://twitter.com/djrbliss/statuses/382632926946402304 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-5933 · Nota de Segurança
• https://plus.google.com/110348415484169880343/posts/5ofgPNrSu3J · Nota