CVE-2013-1773
Linux Kernel < 3.3 - Buffer Overflow in VFAT Filesystem UTF-8 to UTF-16 Conversion
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2013-1773. PoCs published by G13.
AI-analyzed exploit summary This exploit triggers a local DoS in Android kernels 2.6 by writing a filename of 2048+ characters to the sdcard (vfat fs) repeatedly, causing a system restart. The PoC demonstrates the vulnerability by creating an overly long filename and attempting to open it in a loop.
Description
Buffer overflow in the VFAT filesystem implementation in the Linux kernel before 3.3 allows local users to gain privileges or cause a denial of service (system crash) via a VFAT write operation on a filesystem with the utf8 mount option, which is not properly handled during UTF-8 to UTF-16 conversion.
Exploits (1)
This exploit triggers a local DoS in Android kernels 2.6 by writing a filename of 2048+ characters to the sdcard (vfat fs) repeatedly, causing a system restart. The PoC demonstrates the vulnerability by creating an overly long filename and attempting to open it in a loop.