A Privilege Escalation Vulnerability exists in Sprite Software Spritebud 1.3.24 and 1.3.28 and Backup 2.5.4105 and 2.5.4108 on LG Android smartphones due to a race condition in the spritebud daemon, which could let a local malicious user obtain root privileges.
References
Link | Resource |
---|---|
https://seclists.org/fulldisclosure/2013/Jun/196 | Exploit Mailing List Third Party Advisory |
http://www.securityfocus.com/bid/60749 | Third Party Advisory VDB Entry |
https://exchange.xforce.ibmcloud.com/vulnerabilities/85296 | Third Party Advisory VDB Entry |
https://androidvulnerabilities.org/all | Third Party Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2020-02-12 08:15
Updated : 2020-02-19 11:43
NVD link : CVE-2013-3685
Mitre link : CVE-2013-3685
JSON object : View
CWE
CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Products Affected
lg
- f180l
- f200k
- f260l
- f200s
- p875
- f240s
- f120s
- f240l
- p880
- f240k
- f120k
- p760
- ls970
- us780
- f160k
- f160l
- ls860
- f100s
- f180s
- e975k
- p940
- p875h
- e976
- e973
- e975t
- e971
- f100l
- f160lv
- l21_
- p780
- p769
- f120l
- f100k
- e975
- su540
- lg870
- f260k
- f260s
- su870
- f180k
- e977
- f200l
- f160s
spritesoftware
- spritebud
- spritebackup