EUVD-2014-5485

Malware in sbrugna...

Information disclosure

The Puzzle Family aka com.com2us.puzzlefamily.up.freefull.google.global.android.common application 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5598

The Puzzle Family (com.com2us.puzzlefamily.up.freefull.google.global.android.common) Android app 1.2.0 is affected by CVE-2014-5598 due to not verifying X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certif...

CVE-2014-5598

The Puzzle Family aka com.com2us.puzzlefamily.up.freefull.google.global.android.common application 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5595

The actionpuzzlefamily for Kakao aka com.com2us.actionpuzzlefamily.kakao.freefull.google.global.android.common application 1.4.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafte...

CVE-2014-5598: Undefined Security Weakness

The Puzzle Family aka com.com2us.puzzlefamily.up.freefull.google.global.android.common application 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...