Lucene search

K
cvelistMitreCVELIST:CVE-2012-4248
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2012-4248

2022-10-0316:15:34
mitre
www.cve.org
amazon kindle touch
security vulnerability
npapi plugin interface

6.6 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.3%

The Amazon Kindle Touch before 5.1.2 does not properly restrict access to the libkindleplugin.so NPAPI plugin interface, which might allow remote attackers to have an unspecified impact via vectors involving the (1) dev.log, (2) lipc.set, (3) lipc.get, or (4) todo.scheduleItems method, a different vulnerability than CVE-2012-4249.

6.6 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.3%

Related for CVELIST:CVE-2012-4248