CVE-2013-3685

HIGH

Sprite Software SpriteBackup and SpriteBud - Privilege Escalation via Race Condition in Spritebud Daemon

Title source: llm

Description

A Privilege Escalation Vulnerability exists in Sprite Software Spritebud 1.3.24 and 1.3.28 and Backup 2.5.4105 and 2.5.4108 on LG Android smartphones due to a race condition in the spritebud daemon, which could let a local malicious user obtain root privileges.

References (4)

Core 4

Core References

Third Party Advisory, VDB Entry x_refsource_misc

http://www.securityfocus.com/bid/60749

Third Party Advisory, VDB Entry x_refsource_misc

https://exchange.xforce.ibmcloud.com/vulnerabilities/85296

Exploit, Mailing List, Third Party Advisory x_refsource_misc

https://seclists.org/fulldisclosure/2013/Jun/196

Third Party Advisory x_refsource_misc

https://androidvulnerabilities.org/all

Scores

CVSS v3 7.0

EPSS 0.0037

EPSS Percentile 29.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-362

Status published

Products (4)

spritesoftware/spritebackup 2.5.4105

spritesoftware/spritebackup 2.5.4108

spritesoftware/spritebud 1.3.24

spritesoftware/spritebud 1.3.28

Published Feb 12, 2020

Tracked Since Feb 18, 2026