PT-2013-5873 · Motorola+1 · Motorola Defy Xt+1

Published 2013-09-25 · Updated 2013-09-25 · CVE-2013-5933

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Android version 2.3.7 on Motorola Defy XT phone

Description A stack-based buffer overflow issue exists in a certain configuration of the affected device, allowing local users to potentially gain privileges or cause a denial of service due to memory corruption. This occurs when a long string is written to the /dev/socket/init runit socket, which is inconsistent with a previously written length value to this socket.

Recommendations For Android version 2.3.7 on Motorola Defy XT phone, consider restricting access to the /dev/socket/init runit socket to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2013-5933

Affected Products

Android

Motorola Defy Xt

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2013-5933 · Security Note
• http://twitter.com/djrbliss/statuses/382632926946402304 · Note
• https://plus.google.com/110348415484169880343/posts/5ofgPNrSu3J · Note