CVE-2012-4248

EPSS 2.31%
Published 12.08.2012 17:55:01
Last modified 11.04.2025 00:51:21
Source cve@mitre.org
Teams watchlist Login
Open Login

The Amazon Kindle Touch before 5.1.2 does not properly restrict access to the libkindleplugin.so NPAPI plugin interface, which might allow remote attackers to have an unspecified impact via vectors involving the (1) dev.log, (2) lipc.set, (3) lipc.get, or (4) todo.scheduleItems method, a different vulnerability than CVE-2012-4249.

Affected products Warnungen 0 Metrics 2 CWE 0 References 6

Data is provided by the National Vulnerability Database (NVD)

Amazon ≫ Kindle Touch Version <= 5.1.1

Amazon ≫ Kindle Touch Version5.1.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	2.31%	0.842

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

http://www.kb.cert.org/vuls/id/122656

US Government Resource

http://www.kb.cert.org/vuls/id/MORO-8WKGBN

http://www.mobileread.com/forums/showthread.php?s=c7953cc553a4aaa36e880b25aa1a6bf6&t=175368

https://nvd.nist.gov/vuln/detail/CVE-2012-4248

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-4248

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-4248

EUVD