CVE-2013-6774

Exploit

EPSS 0.37%
Published 31.03.2014 14:58:57
Last modified 12.04.2025 10:46:40
Source cve@mitre.org
Teams watchlist Login
Open Login

Untrusted search path vulnerability in the ChainsDD Superuser package 3.1.3 for Android 4.2.x and earlier, CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for Android 4.2.x and earlier, and Chainfire SuperSU package before 1.69 for Android 4.2.x and earlier allows attackers to load an arbitrary .jar file and gain privileges via a crafted BOOTCLASSPATH environment variable for a /system/xbin/su process.  NOTE: another researcher was unable to reproduce this with ChainsDD Superuser.

Affected products Warnungen 0 Metrics 2 CWE 0 References 5

Data is provided by the National Vulnerability Database (NVD)

Chainfire ≫ Supersu Version1.69 SwPlatformandroid

   Google ≫ Android Version1.0
   Google ≫ Android Version1.1
   Google ≫ Android Version1.5
   Google ≫ Android Version1.6
   Google ≫ Android Version2.0
   Google ≫ Android Version2.0.1
   Google ≫ Android Version2.1
   Google ≫ Android Version2.2
   Google ≫ Android Version2.2 Updaterev1
   Google ≫ Android Version2.2.1
   Google ≫ Android Version2.2.2
   Google ≫ Android Version2.2.3
   Google ≫ Android Version2.3
   Google ≫ Android Version2.3 Updaterev1
   Google ≫ Android Version2.3.1
   Google ≫ Android Version2.3.2
   Google ≫ Android Version2.3.3
   Google ≫ Android Version2.3.4
   Google ≫ Android Version2.3.5
   Google ≫ Android Version2.3.6
   Google ≫ Android Version2.3.7
   Google ≫ Android Version3.0
   Google ≫ Android Version3.1
   Google ≫ Android Version3.2
   Google ≫ Android Version3.2.1
   Google ≫ Android Version3.2.2
   Google ≫ Android Version3.2.4
   Google ≫ Android Version3.2.6
   Google ≫ Android Version4.0
   Google ≫ Android Version4.0.1
   Google ≫ Android Version4.0.2
   Google ≫ Android Version4.0.3
   Google ≫ Android Version4.0.4
   Google ≫ Android Version4.1
   Google ≫ Android Version4.1.2
   Google ≫ Android Version4.2
   Google ≫ Android Version4.2.1
   Google ≫ Android Version4.2.2

Androidsu ≫ Chainsdd Superuser Version3.1.3 SwPlatformandroid

Koushik Dutta ≫ Superuser Version1.0.2.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.37%	0.559

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

http://www.securityfocus.com/archive/1/529796

Exploit

http://www.securityfocus.com/archive/1/529822

https://nvd.nist.gov/vuln/detail/CVE-2013-6774

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-6774

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-6774

EUVD