CVE-2013-6768 | BDVDB-2026-60672 Detail

Description#

Untrusted search path vulnerability in the CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for Android 4.2.x and earlier allows attackers to trigger the launch of a Trojan horse app_process program via a crafted PATH environment variable for a /system/xbin/su process.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/archive/1/529796

Exploit#

No public exploit known

History#

Version 12014-03-30Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.