CVE-2013-2142 - CVE House
Back to Database
Status published Low CVE-2013-2142

userpref.c in libimobiledevice 1.1.4, when $HOME and $XDG_CONFIG_HOME are not...

Vulnerability Description

userpref.c in libimobiledevice 1.1.4, when $HOME and $XDG_CONFIG_HOME are not set, allows local users to overwrite arbitrary files via a symlink attack on (1) HostCertificate.pem, (2) HostPrivateKey.pem, (3) libimobiledevicerc, (4) RootCertificate.pem, or (5) RootPrivateKey.pem in /tmp/root/.config/libimobiledevice/.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-2142

Credits & Attribution

No credits recorded in the NVD database.

References

More from libimobiledevice

View All →
CVE-2025-66004
Local privilege escalation in usbmuxd from arbitrary local user to usbmux
Medium 5.1
CVE-2017-7982
Integer overflow in the plist_from_bin function in bplist.c in libimobiledevice/libplist...
Medium 5.5
CVE-2017-5836
The plist_free_data function in plist.c in libplist allows attackers to...
High 7.5
CVE-2017-5835
libplist allows attackers to cause a denial of service (large...
High 7.5
CVE-2017-5834
The parse_dict_node function in bplist.c in libplist allows attackers to...
Medium 5.5

Affected Vendor

libimobiledevice

View all reports →

Affected Software

libimobiledevice
Vulnerable Versions:
1.1.4

Timeline

Official Publish: January 19th, 2014
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.