CVE-2018-11025

kernel/omap/drivers/mfd/twl6030-gpadc.c in the kernel component in Amazon Kindle Fire HD3rd Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/twl6030-gpadc with the command 24832 and cause a kernel crash...

CVE-2018-11021

kernel/omap/drivers/video/omap2/dsscomp/device.c in the kernel component in Amazon Kindle Fire HD3rd Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/dsscomp with the command 1118064517 and cause a kernel crash...

CVE-2018-11024

kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD 3rd Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/gcioctl with the command 1077435789 and cause a kernel crash...

CVE-2018-11023

kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD 3rd Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/gcioctl with the command 3222560159 and cause a kernel crash...

CVE-2017-6189

Untrusted search path vulnerability in Amazon Kindle for PC before 1.19 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL in the current working directory of the Kindle Setup installer...

Design/Logic Flaw

Untrusted search path vulnerability in Amazon Kindle for PC before 1.19 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL in the current working directory of the Kindle Setup installer...

CVE-2017-6189

Untrusted search path vulnerability in Amazon Kindle for PC before 1.19 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL in the current working directory of the Kindle Setup installer...

CVE-2017-6189

Untrusted search path vulnerability in Amazon Kindle for PC before 1.19 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL in the current working directory of the Kindle Setup installer...

CVE-2017-6189

The CVE-2017-6189 issue affects Amazon Kindle for PC prior to 1.19, where an untrusted search path allows local users to perform DLL hijacking and arbitrary code execution via a Trojan DLL placed in the Kindle Setup installer’s current working directory. The vulnerability is tied to the Kindle Se...

Amazon Kindle Setup DLL Load Native Code Execution Vulnerability

Amazon Kindle Setup is a set of e-book reader installation applications for the Android-based platform from Amazon USA. A local arbitrary code execution vulnerability exists in Amazon Kindle Setup due to the program failing to filter user-submitted input. A local attacker could exploit the...

Amazon Silk Information Disclosure Vulnerability

Amazon Silk is a cloud browser developed by Amazon.com for its tablet computer, the Kindle Fire. An information disclosure vulnerability exists in Amazon Silk version 49.3.1. An attacker can exploit this vulnerability to conduct a man-in-the-middle attack and obtain sensitive information...

Amazon Kindle - Exported ContentProvider, Insecure KeyStore, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Amazon Kindle published at the 'play' market has multiple vulnerabilities...

Free eBooks for Kindle - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Free eBooks for Kindle published at the 'play' market has multiple vulnerabilities...

CVE-2014-6750

The $0.99 Kindle Books aka com.kindle.books.for99 application 6.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The $0.99 Kindle Books aka com.kindle.books.for99 application 6.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6750

The $0.99 Kindle Books aka com.kindle.books.for99 application 6.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6750

The CVE-2014-6750 entry concerns the Android app “The $0.99 Kindle Books (com.kindle.books.for99)” version 6.0, which does not verify X.509 certificates from SSL servers. This behavior enables man-in-the-middle attackers to spoof servers and access sensitive information via a crafted certificate....

CVE-2014-5925

The 10000 Kindle Books Downloads aka com.ww10000KindleBooksLatestnBestSellers application 0.312 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The 10000 Kindle Books Downloads aka com.ww10000KindleBooksLatestnBestSellers application 0.312 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5925

The CVE-2014-5925 entry concerns the Android app “10000 Kindle Books Downloads” (com.ww10000KindleBooksLatestnBestSellers) version 0.312, which does not verify X.509 certificates from SSL servers. This lack of certificate validation can allow a man-in-the-middle to spoof servers and obtain sensit...