← Back

CVE-2013-3685

nvd nist
Published: Feb 12, 2020Modified: Nov 21, 2024

JSON object

Loading...
7.0
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.0 / Impact: 5.9
Source: NVD

Description

A Privilege Escalation Vulnerability exists in Sprite Software Spritebud 1.3.24 and 1.3.28 and Backup 2.5.4105 and 2.5.4108 on LG Android smartphones due to a race condition in the spritebud daemon, which could let a local malicious user obtain root privileges.

Affected (4)

Spritesoftware
2 products
Spritebackup
Spritebud
Configuration A
4 vulnerable · 43 platform
Vulnerable SoftwareAffected Versions
Spritesoftware
Spritebackup
Version 2.5.4105
Spritebackup
Version 2.5.4108
Spritesoftware
Spritebud
Version 1.3.24
Spritebud
Version 1.3.28
Running on/withPlatform Versions
Lg
E971
All versions
Lg
E973
All versions
Lg
E975
All versions
Lg
E975k
All versions
Lg
E975t
All versions
Lg
E976
All versions
Lg
E977
All versions
Lg
F100k
All versions
Lg
F100l
All versions
Lg
F100s
All versions
Lg
F120k
All versions
Lg
F120l
All versions
Lg
F120s
All versions
Lg
F160k
All versions
Lg
F160l
All versions
Lg
F160lv
All versions
Lg
F160s
All versions
Lg
F180k
All versions
Lg
F180l
All versions
Lg
F180s
All versions
Lg
F200k
All versions
Lg
F200l
All versions
Lg
F200s
All versions
Lg
F240k
All versions
Lg
F240l
All versions
Lg
F240s
All versions
Lg
F260k
All versions
Lg
F260l
All versions
Lg
F260s
All versions
Lg
L21
All versions
Lg
Lg870
All versions
Lg
Ls860
All versions
Lg
Ls970
All versions
Lg
P760
All versions
Lg
P769
All versions
Lg
P780
All versions
Lg
P875
All versions
Lg
P875h
All versions
Lg
P880
All versions
Lg
P940
All versions
Lg
Su540
All versions
Lg
Su870
All versions
Lg
Us780
All versions

Related CWEs

CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

References (8)

Source: cve@mitre.org
Third Party AdvisoryVDB Entry
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party AdvisoryVDB Entry
Source: cve@mitre.org
ExploitMailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitMailing ListThird Party Advisory

Timeline

No history available yet.