What’s Vulnerable › Vulnerabilities

CVE-2013-5933

• Severity: medium (CVSS 6.9 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2013-09-25 · updated 2026-06-16
• Weakness: CWE-119

Description

Stack-based buffer overflow in the sub_E110 function in init in a certain configuration of Android 2.3.7 on the Motorola Defy XT phone for Republic Wireless allows local users to gain privileges or cause a denial of service (memory corruption) by writing a long string to the /dev/socket/init_runit socket that is inconsistent with a certain length value that was previously written to this socket.

Affected products

• Android: 2.3.7
• Motorola Defy Xt: all versions

References

• http://twitter.com/djrbliss/statuses/382632926946402304
• https://plus.google.com/110348415484169880343/posts/5ofgPNrSu3J
• http://twitter.com/djrbliss/statuses/382632926946402304
• https://plus.google.com/110348415484169880343/posts/5ofgPNrSu3J

Get alerted when CVE-2013-5933 or the next vulnerability affects your stack