CVE-2013-4777

Description

A certain configuration of Android 2.3.7 on the Motorola Defy XT phone for Republic Wireless uses init to create a /dev/socket/init_runit socket that listens for shell commands, which allows local users to gain privileges by interacting with a LocalSocket object.

Predictions

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

References

• https://plus.google.com/110348415484169880343/posts/5ofgPNrSu3J
• https://plus.google.com/110348415484169880343/posts/5ofgPNrSu3J

CWEs

CWE-264