Android For MSM Project CVE-2013-4738 Multiple Stack Based Buffer Overflow Vulnerabilities

Bugtraq ID:	63263
Class:	Boundary Condition Error
CVE:	CVE-2013-4738
Remote:	No
Local:	Yes
Published:	Oct 15 2013 12:00AM
Updated:	Oct 15 2013 12:00AM
Credit:	Jonathan Salwan of the Sysdream Security Lab
Vulnerable:
Not Vulnerable:

Android For MSM Project CVE-2013-4738 Multiple Stack Based Buffer Overflow Vulnerabilities

Android for MSM project is prone to multiple stack-based buffer-overflow vulnerabilities because it fails to properly bounds-check user-supplied data before copying it into an insufficiently sized buffer.

Local attackers can exploit these issues to run arbitrary code with elevated privileges. Failed exploit attempts will likely result in denial-of-service conditions.

Android For MSM Project CVE-2013-4738 Multiple Stack Based Buffer Overflow Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Android For MSM Project CVE-2013-4738 Multiple Stack Based Buffer Overflow Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Android For MSM Project CVE-2013-4738 Multiple Stack Based Buffer Overflow Vulnerabilities

References:

• Android for MSM Project Homepage (Code Aurora Forum)
  
• msm: camera: Add lower and upper bounds check in msm_cpp.c ioctl() (Seemanta Dutta)
  
• msm: camera: Bound check length for Dequeue stream buff info (Hariram Purushothaman)
  
• Stack-based buffer overflow and memory disclosure in camera driver (CVE-2013-473 (Code Aurora Forum)