CVE-2012-4248

EPSS 2.31%
Veröffentlicht 12.08.2012 17:55:01
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

The Amazon Kindle Touch before 5.1.2 does not properly restrict access to the libkindleplugin.so NPAPI plugin interface, which might allow remote attackers to have an unspecified impact via vectors involving the (1) dev.log, (2) lipc.set, (3) lipc.get, or (4) todo.scheduleItems method, a different vulnerability than CVE-2012-4249.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Amazon ≫ Kindle Touch Version <= 5.1.1

Amazon ≫ Kindle Touch Version5.1.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.31%	0.842

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

http://www.kb.cert.org/vuls/id/122656

US Government Resource

http://www.kb.cert.org/vuls/id/MORO-8WKGBN

http://www.mobileread.com/forums/showthread.php?s=c7953cc553a4aaa36e880b25aa1a6bf6&t=175368

https://nvd.nist.gov/vuln/detail/CVE-2012-4248

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-4248

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-4248

EUVD