Lucene search
MitreCVE-2012-4249HistoryAug 12, 2012 - 5:55 p.m.
CVE-2012-4249
2012-08-1217:55:01
CWE-94
mitre
web.nvd.nist.gov
27
cve-2012-4249
amazon lab126
kindle touch
shell metacharacters
arbitrary commands
nvd
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.5
Confidence
High
EPSS
0.007
Percentile
80.6%
The Amazon Lab126 com.lab126.system sendEvent implementation on the Kindle Touch before 5.1.2 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a string, as demonstrated by using lipc-set-prop to set an LIPC property, a different vulnerability than CVE-2012-4248.
Affected configurations
Node
amazonkindle_touchMatch5.1.0
ORamazonkindle_touchMatch5.1.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| amazon | kindle_touch | 5.1.0 | cpe:2.3:h:amazon:kindle_touch:5.1.0:*:*:*:*:*:*:* |
| amazon | kindle_touch | 5.1.1 | cpe:2.3:h:amazon:kindle_touch:5.1.1:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2012-4248
2012-08-12 17:55:01
cert
cert
Amazon Kindle Touch libkindleplugin scriptable browser plugin vulnerability
2012-07-30 00:00:00
prion
prion
Code injection
2012-08-12 17:55:00
Design/Logic Flaw
2012-08-12 17:55:00
cvelist
cvelist
CVE-2012-4248
2012-08-12 17:00:00
CVE-2012-4249
2012-08-12 17:00:00
nvd
nvd
CVE-2012-4249
2012-08-12 17:55:01
CVE-2012-4248
2012-08-12 17:55:01
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.5
Confidence
High
EPSS
0.007
Percentile
80.6%
Related for CVE-2012-4249