Vulnerability in Google Android
CVE-2013-4777
A certain configuration of Android 2.3.7 on the Motorola Defy XT phone for Republic Wireless uses init to create a /dev/socket/init_runit socket that listens for shell commands, which allows local users to gain privileges by interacting with a LocalSocket object.
EPSS: 0.002 (11.6th percentile) — read the EPSS interpretation.
Affected products
- Google Android — versions 2.3.7
- Motorola Defy_xt
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)