EUVD-2021-17286

Malware in sbrugna...

CVE-2021-30355

Amazon Kindle e-reader prior to and including version 5.13.4 improperly manages privileges, allowing the framework user to elevate privileges to root...

Integer overflow

Amazon Kindle e-reader prior to and including version 5.13.4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function CJBig2Image::expand and results in a memory corruption that leads to code execution when parsing a crafted PDF book...

CVE-2021-30355

CVE-2021-30355 affects Amazon Kindle e-reader firmware up to version 5.13.4. The issue is a local privilege escalation where the Kindle framework user can elevate to root due to improper privilege management. A related chain involves a heap overflow in the PDF rendering path (CVE-2021-30354) that...

CVE-2021-30354

CVE-2021-30354 affects Amazon Kindle e-reader up to and including version 5.13.4. The issue is an integer overflow that leads to a heap-based buffer overflow in CJBig2Image::expand(), causing memory corruption and potential code execution when parsing a crafted PDF book. Connected documents confi...

CVE-2021-30354

Amazon Kindle e-reader prior to and including version 5.13.4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function CJBig2Image::expand and results in a memory corruption that leads to code execution when parsing a crafted PDF book...

Amazon Kindle e-reader 安全漏洞

The Amazon Kindle e-reader is an e-reader from Amazon.com, Inc. A security vulnerability exists in Amazon Kindle e-reader version 5.13.4 and earlier, which stems from improper administrative privileges and can be exploited by an attacker to elevate privileges to the root user...

Kmart, Latest Victim of Egregor Ransomware – Report

Retail stalwart Kmart has suffered a ransomware attack at the hands of the Egregor gang, according to a report. The incident has encrypted devices and servers connected to the company’s networks, knocking out back-end services, according to BleepingComputer. The outlet obtained the purported rans...

October 2014 Microsoft Patch Tuesday security bulletins

Microsoft on Tuesday will push out its first set of patches since it announced the dissolution of the Trustworthy Computing group that gave birth to Patch Tuesday. The monthly patch cycle was just one output from TwC, which was formed in the ashes of Code Red, Nimda and hundreds of other network...