EUVD-2014-7256

Malware in sbrugna...

CVE-2014-7385

The Aperture Mobile Media aka com.appaperturemobilemedia.layout application 1.404 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Aperture Mobile Media aka com.appaperturemobilemedia.layout application 1.404 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7385

The Aperture Mobile Media aka com.appaperturemobilemedia.layout application 1.404 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7385

The CVE-2014-7385 entry concerns the Aperture Mobile Media Android app (package com.app_aperturemobilemedia.layout), version 1.404, which does not verify X.509 certificates when connecting to SSL servers. Root cause: SSL certificate verification is bypassed, enabling a man‑in‑the‑middle attacker ...

CVE-2014-7385: Undefined Security Weakness

The Aperture Mobile Media aka com.appaperturemobilemedia.layout application 1.404 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-7952

Name of the Vulnerable Software and Affected Versions Aperture Mobile Media aka com.app aperturemobilemedia.layout version 1.404 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not...