EUVD-2014-5488

Malware in sbrugna...

CVE-2014-5601: Undefined Security Weakness

The 1800CONTACTS App aka com.contacts1800.ecomapp application 2.7.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...