CVE-2012-4249

The Amazon Lab126 com.lab126.system sendEvent implementation on the Kindle Touch before 5.1.2 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a string, as demonstrated by using lipc-set-prop to set an LIPC property, a different vulnerability than...

CVE-2012-4248

The Amazon Kindle Touch before 5.1.2 does not properly restrict access to the libkindleplugin.so NPAPI plugin interface, which might allow remote attackers to have an unspecified impact via vectors involving the 1 dev.log, 2 lipc.set, 3 lipc.get, or 4 todo.scheduleItems method, a different...

kindle.com.au Cross Site Scripting vulnerability OBB-3907004

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MAL-2023-569 Malicious code in little-heaven-by-nick-cutter-on-kindle-new-pages- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1118eac8c0f8eef839cf2daade621df7e1fc982faf90314a0bbb38622add51c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in american-street-by-ibi-zoboi-on-kindle-full-pages- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb1b7187e0d85c6c6d44002a25e63c833281927be47eafa6000c49b067767bde Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-875 Malicious code in the-seven-husbands-of-evelyn-hugo-by-taylor-jenkins-reid-on-kindle-full-format- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b996573435a17bafd3483e21096621cf64db349dc46ad984ae804d9c527e93f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-89 Malicious code in american-street-by-ibi-zoboi-on-kindle-full-pages- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb1b7187e0d85c6c6d44002a25e63c833281927be47eafa6000c49b067767bde Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in waking-the-tiger-healing-trauma-by-peter-a-levine-on-kindle-new-format- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56e7c06c2c8726451ba57c135984e358b979a90b334fb4955bb563661fce5e99 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hidden-figures-by-margot-lee-shetterly-on-kindle-new-format- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f590319b403094952f29a5b9f3aa1cf0e0ec90d32d07827c94561de104355b97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-957 Malicious code in waking-the-tiger-healing-trauma-by-peter-a-levine-on-kindle-new-format- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56e7c06c2c8726451ba57c135984e358b979a90b334fb4955bb563661fce5e99 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-285 Malicious code in dow-load-twisted-palace-the-royals-3-by-erin-watt-on-kindle-full-edition- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0992916e30ffe316f71ab67ab891183b2e852e6e9a04300baf44278b106f7b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the CJBig2Image::expand() function in Kindle electronic book readers allows a hacker to execute arbitrary code.

The vulnerability of the CJBig2Image::expand function in Kindle e-book readers is due to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created PDF file...

Best of TaoSecurity Blog Kindle Edition Sale

I'm running a BlackFriday CyberMonday sale on my four newest Kindle format books. Volumes 1-4 of The Best of TaoSecurity Blog will be half off starting 9 pm PT Tuesday 22 Nov and ending 9 pm PT Tueday 29 Nov. They are here. There also appears to be a daily deal right now for the paperback of Volu...

Memory Out-of-Bounds Read Vulnerability in Libmobi Versions Prior to 0.11

Libmobi is a C library . Used to handle Mobipocket/Kindle MOBI e-book format documents. A memory out-of-bounds read vulnerability exists in Libmobi versions prior to 0.11, which can be exploited by attackers to obtain sensitive information...

Binary vulnerability in Libmobi versions prior to 0.11

Libmobi is a C library . Used to handle Mobipocket/Kindle MOBI e-book format documents. A binary vulnerability exists in Libmobi versions prior to 0.11, which can be exploited by attackers to obtain sensitive information...

Libmobi Denial of Service Vulnerability (CNVD-2022-54978)

Libmobi is a C library for handling Mobipocket/Kindle MOBI e-book format documents. It is used to process Mobipocket/Kindle MOBI e-book format documents. A denial of service vulnerability exists in versions of Libmobi prior to v0.10, which stems from the component mobibuffergetpointer cancelling...

Libmobi has an unspecified vulnerability

Libmobi is a C library . Used to handle Mobipocket/Kindle MOBI e-book format documents. A security vulnerability exists in Libmobi versions prior to 0.11, which stems from a buffer over-read. No details of the vulnerability are available at this time...

libmobi buffer overflow vulnerability (CNVD-2022-18219)

Libmobi is a C library . Used to handle Mobipocket/Kindle MOBI e-book format documents. A buffer overflow vulnerability exists in Libmobi, which stems from the fact that libmobi is susceptible to out-of-range pointer offsets, which can be exploited by an attacker to read memory information beyond...

Libmobi Out-of-Bounds Read Vulnerability

Libmobi is a C library . Used to handle Mobipocket/Kindle MOBI e-book format documents. An out-of-bounds read vulnerability exists in Libmobi, which stems from the program being vulnerable to the use of out-of-range pointer offsets, and can be exploited by an attacker to read memory information...

Libmobi 缓冲区错误漏洞

Libmobi is a C library for handling Mobipocket/Kindle MOBI e-book format documents. It is used to process Mobipocket/Kindle MOBI e-book format documents. libmobi is vulnerable to a buffer overflow vulnerability that could be exploited to read memory information beyond the size of the buffer...