CVE-2012-4249: Code Injection
The Amazon Lab126 com.lab126.system sendEvent implementation on the Kindle Touch before 5.1.2 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a string, as demonstrated by using lipc-set-prop to set an LIPC property, a different vulnerability than CVE-2012-4248.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-4249?
CVE-2012-4249 is classified as a high severity vulnerability due to its potential for arbitrary command execution.
How do I fix CVE-2012-4249?
To fix CVE-2012-4249, update your Kindle Touch to version 5.1.2 or later, which addresses this vulnerability.
Who is affected by CVE-2012-4249?
CVE-2012-4249 affects Kindle Touch devices running versions 5.1.0 and 5.1.1.
What type of vulnerability is CVE-2012-4249?
CVE-2012-4249 is a command injection vulnerability that allows attackers to execute arbitrary commands.
Can CVE-2012-4249 be exploited remotely?
Yes, CVE-2012-4249 can be exploited by context-dependent attackers with access to the vulnerable system.