EUVD-2014-5488

Malware in sbrugna...

CVE-2014-5601

The 1800CONTACTS App aka com.contacts1800.ecomapp application 2.7.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The 1800CONTACTS App aka com.contacts1800.ecomapp application 2.7.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5601

The CVE-2014-5601 issue affects the Android app 1800CONTACTS (com.contacts1800.ecomapp) version 2.7.0, where the app does not verify SSL/TLS X.509 certificates when establishing HTTPS connections. Root cause: missing/incorrect certificate validation logic allows MITM attackers to spoof servers an...