An advertising dropper in Google Play

Recently, the popular CamScanner – Phone PDF creator app caught our attention. According to Google Play, it has been installed more than 100 million times. The developers position it as a solution for scanning and managing digitized documents, but negative user reviews that have been left over th...

CamScanner -Phone PDF Creator - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application CamScanner -Phone PDF Creator published at the 'play' market has multiple vulnerabilities...

CVE-2014-5645

The CamScanner -Phone PDF Creator aka com.intsig.camscanner application 3.4.0.20140624 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The CamScanner -Phone PDF Creator aka com.intsig.camscanner application 3.4.0.20140624 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5645

The CamScanner -Phone PDF Creator aka com.intsig.camscanner application 3.4.0.20140624 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5645

The CVE-2014-5645 entry concerns the CamScanner -Phone PDF Creator (com.intsig.camscanner) for Android (version 3.4.0.20140624). The vulnerability is that the app does not verify X.509 certificates when establishing SSL connections, enabling man-in-the-middle attackers to spoof servers and obtain...

CVE-2014-5645: Undefined Security Weakness

The CamScanner -Phone PDF Creator aka com.intsig.camscanner application 3.4.0.20140624 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2012-1401

Unspecified vulnerability in the CamScanner com.intsig.camscanner application 1.2.2.20110823 and 1.3.2.20120116 for Android has unknown impact and attack vectors...

CVE-2012-1401

Unspecified vulnerability in the CamScanner com.intsig.camscanner application 1.2.2.20110823 and 1.3.2.20120116 for Android has unknown impact and attack vectors...

Design/Logic Flaw

Unspecified vulnerability in the CamScanner com.intsig.camscanner application 1.2.2.20110823 and 1.3.2.20120116 for Android has unknown impact and attack vectors...

CVE-2012-1401

Unspecified vulnerability in the CamScanner com.intsig.camscanner application 1.2.2.20110823 and 1.3.2.20120116 for Android has unknown impact and attack vectors...

CVE-2012-1401

Technical details about CVE-2012-1401 are not publicly provided in the connected documents. The initial description notes an unspecified Android vulnerability with unknown impact and vectors. Monitor for updates from official sources for concrete affected components and remediation.

CVE-2012-1401: Undefined Security Weakness

Unspecified vulnerability in the CamScanner com.intsig.camscanner application 1.2.2.20110823 and 1.3.2.20120116 for Android has unknown impact and attack vectors...