Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2012-4248
HistoryAug 12, 2012 - 5:55 p.m.

CVE-2012-4248

2012-08-1217:55:01
CWE-264
[email protected]
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.6 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.3%

JSON

The Amazon Kindle Touch before 5.1.2 does not properly restrict access to the libkindleplugin.so NPAPI plugin interface, which might allow remote attackers to have an unspecified impact via vectors involving the (1) dev.log, (2) lipc.set, (3) lipc.get, or (4) todo.scheduleItems method, a different vulnerability than CVE-2012-4249.

Affected configurations

NVD
Node
amazonkindle_touchRange≤5.1.1
OR
amazonkindle_touchMatch5.1.0

Related

prion 2
nvd 1
cvelist 2
cve 2
cert 1
prion
prion
Design/Logic Flaw
2012-08-12 17:55:00
Code injection
2012-08-12 17:55:00
nvd
nvd
CVE-2012-4249
2012-08-12 17:55:01
cvelist
cvelist
CVE-2012-4249
2022-10-03 16:15:32
CVE-2012-4248
2022-10-03 16:15:34
cve
cve
CVE-2012-4249
2022-10-03 16:15:32
CVE-2012-4248
2022-10-03 16:15:34
cert
cert
Amazon Kindle Touch libkindleplugin scriptable browser plugin vulnerability
2012-07-30 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.6 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.3%

JSON
Related for NVD:CVE-2012-4248
prion2nvd1cvelist2cve2cert1