CVE-2013-5933

Description

Stack-based buffer overflow in the sub_E110 function in init in a certain configuration of Android 2.3.7 on the Motorola Defy XT phone for Republic Wireless allows local users to gain privileges or cause a denial of service (memory corruption) by writing a long string to the /dev/socket/init_runit socket that is inconsistent with a certain length value that was previously written to this socket.

Predictions

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

References

• http://twitter.com/djrbliss/statuses/382632926946402304
• https://plus.google.com/110348415484169880343/posts/5ofgPNrSu3J
• http://twitter.com/djrbliss/statuses/382632926946402304
• https://plus.google.com/110348415484169880343/posts/5ofgPNrSu3J

CWEs

CWE-119