Improper input validation in Google Android

CVE-2013-6769

The CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for Android allows attackers to gain privileges via shell metacharacters in the -c option to /system/xbin/su.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.016 (73.1th percentile) — read the EPSS interpretation.

Affected products

Google Android
Koushik_dutta Superuser — versions 1.0.2.1
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

cve@mitre.org (mailing-list, Exploit, x_refsource_BUGTRAQ)