CVE-2018-11023

kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD 3rd Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/gcioctl with the command 3222560159 and cause a kernel crash...

CVE-2018-11024

CVE-2018-11024 affects the kernel component in Amazon Kindle Fire HD (3rd gen) running Fire OS 4.5.5.3. The vulnerable code resides in kernel/omap/drivers/misc/gcx/gcioctl/gcif.c. An attacker can pass a crafted argument to an ioctl on /dev/gcioctl with command 1077435789, which can trigger a kern...

CVE-2018-11020

The CVE-2018-11020 issue affects Amazon Kindle Fire HD (3rd gen) running Fire OS 4.5.5.3. The kernel component kernel/omap/drivers/rpmsg/rpmsg_omx.c is vulnerable to a crafted ioctl argument on /dev/rpmsg-omx1 using command 3221772291, which can trigger a kernel crash. Documents consistently iden...

CVE-2018-11025

kernel/omap/drivers/mfd/twl6030-gpadc.c in the kernel component in Amazon Kindle Fire HD3rd Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/twl6030-gpadc with the command 24832 and cause a kernel crash...

Design/Logic Flaw

Untrusted search path vulnerability in Amazon Kindle for PC before 1.19 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL in the current working directory of the Kindle Setup installer...

CVE-2017-6189

Untrusted search path vulnerability in Amazon Kindle for PC before 1.19 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL in the current working directory of the Kindle Setup installer...

CVE-2017-6189

Untrusted search path vulnerability in Amazon Kindle for PC before 1.19 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL in the current working directory of the Kindle Setup installer...

CVE-2017-6189

The CVE-2017-6189 issue affects Amazon Kindle for PC prior to 1.19, where an untrusted search path allows local users to perform DLL hijacking and arbitrary code execution via a Trojan DLL placed in the Kindle Setup installer’s current working directory. The vulnerability is tied to the Kindle Se...

CVE-2017-6189

Untrusted search path vulnerability in Amazon Kindle for PC before 1.19 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL in the current working directory of the Kindle Setup installer...

Amazon Kindle Setup DLL Load Native Code Execution Vulnerability

Amazon Kindle Setup is a set of e-book reader installation applications for the Android-based platform from Amazon USA. A local arbitrary code execution vulnerability exists in Amazon Kindle Setup due to the program failing to filter user-submitted input. A local attacker could exploit the...

Amazon Silk Information Disclosure Vulnerability

Amazon Silk is a cloud browser developed by Amazon.com for its tablet computer, the Kindle Fire. An information disclosure vulnerability exists in Amazon Silk version 49.3.1. An attacker can exploit this vulnerability to conduct a man-in-the-middle attack and obtain sensitive information...

Amazon Kindle - Exported ContentProvider, Insecure KeyStore, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Amazon Kindle published at the 'play' market has multiple vulnerabilities...

Free eBooks for Kindle - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Free eBooks for Kindle published at the 'play' market has multiple vulnerabilities...

CVE-2014-6750

The $0.99 Kindle Books aka com.kindle.books.for99 application 6.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The $0.99 Kindle Books aka com.kindle.books.for99 application 6.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6750

The CVE-2014-6750 entry concerns the Android app “The $0.99 Kindle Books (com.kindle.books.for99)” version 6.0, which does not verify X.509 certificates from SSL servers. This behavior enables man-in-the-middle attackers to spoof servers and access sensitive information via a crafted certificate....

CVE-2014-6750

The $0.99 Kindle Books aka com.kindle.books.for99 application 6.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5925

The 10000 Kindle Books Downloads aka com.ww10000KindleBooksLatestnBestSellers application 0.312 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The 10000 Kindle Books Downloads aka com.ww10000KindleBooksLatestnBestSellers application 0.312 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5925

The 10000 Kindle Books Downloads aka com.ww10000KindleBooksLatestnBestSellers application 0.312 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...