Stack-based Buffer Overflow in init_runit Socket on Android 2.3.7

CVE-2013-5933 · MEDIUM Severity

AV:L/AC:M/AU:N/C:C/I:C/A:C

Stack-based buffer overflow in the sub_E110 function in init in a certain configuration of Android 2.3.7 on the Motorola Defy XT phone for Republic Wireless allows local users to gain privileges or cause a denial of service (memory corruption) by writing a long string to the /dev/socket/init_runit socket that is inconsistent with a certain length value that was previously written to this socket.

Learn more about our Cis Benchmark Audit For Google Android.