Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2013-3685


A Privilege Escalation Vulnerability exists in Sprite Software Spritebud 1.3.24 and 1.3.28 and Backup 2.5.4105 and 2.5.4108 on LG Android smartphones due to a race condition in the spritebud daemon, which could let a local malicious user obtain root privileges.


Published

2020-02-12T16:15:10.863

Last Modified

2024-11-21T01:54:07.347

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.0 (HIGH)

CVSSv2 Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

  • Access Vector: LOCAL
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

3.4

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-362

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application spritesoftware spritebackup 2.5.4105 Yes
Application spritesoftware spritebackup 2.5.4108 Yes
Application spritesoftware spritebud 1.3.24 Yes
Application spritesoftware spritebud 1.3.28 Yes
Hardware lg e971 - No
Hardware lg e973 - No
Hardware lg e975 - No
Hardware lg e975k - No
Hardware lg e975t - No
Hardware lg e976 - No
Hardware lg e977 - No
Hardware lg f100k - No
Hardware lg f100l - No
Hardware lg f100s - No
Hardware lg f120k - No
Hardware lg f120l - No
Hardware lg f120s - No
Hardware lg f160k - No
Hardware lg f160l - No
Hardware lg f160lv - No
Hardware lg f160s - No
Hardware lg f180k - No
Hardware lg f180l - No
Hardware lg f180s - No
Hardware lg f200k - No
Hardware lg f200l - No
Hardware lg f200s - No
Hardware lg f240k - No
Hardware lg f240l - No
Hardware lg f240s - No
Hardware lg f260k - No
Hardware lg f260l - No
Hardware lg f260s - No
Hardware lg l21_ - No
Hardware lg lg870 - No
Hardware lg ls860 - No
Hardware lg ls970 - No
Hardware lg p760 - No
Hardware lg p769 - No
Hardware lg p780 - No
Hardware lg p875 - No
Hardware lg p875h - No
Hardware lg p880 - No
Hardware lg p940 - No
Hardware lg su540 - No
Hardware lg su870 - No
Hardware lg us780 - No

References