EUVD-2014-5677

Malware in sbrugna...

CVE-2014-5790

The CVE-2014-5790 entry documents a vulnerability in the Android application “Pets Fun House” (package mominis.Generic_Android.Pets_Fun_House), version 1.0.1, where X.509 certificates are not verified when establishing SSL connections. This insecure TLS handling enables man-in-the-middle attacker...

CVE-2014-5790: Undefined Security Weakness

The Pets Fun House aka mominis.GenericAndroid.PetsFunHouse application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...