VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 19, 2014· Updated Jun 16, 2026

CVE-2013-2142

CVE-2013-2142

Description

userpref.c in libimobiledevice 1.1.4, when $HOME and $XDG_CONFIG_HOME are not set, allows local users to overwrite arbitrary files via a symlink attack on (1) HostCertificate.pem, (2) HostPrivateKey.pem, (3) libimobiledevicerc, (4) RootCertificate.pem, or (5) RootPrivateKey.pem in /tmp/root/.config/libimobiledevice/.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Libimobiledevice/Libimobiledevice2 versions
    cpe:2.3:a:libimobiledevice:libimobiledevice:1.1.4:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:libimobiledevice:libimobiledevice:1.1.4:*:*:*:*:*:*:*
    • (no CPE)range: <=1.1.4

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.