EUVD-2014-5774

Malware in sbrugna...

CVE-2014-5887

The Yell Local Search aka com.yell.launcher2 application 4.2.1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Code injection

The Yell Local Search aka com.yell.launcher2 application 4.2.1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5887

CVE-2014-5887 concerns the Yell Local Search app (com.yell.launcher2) for Android, version 4.2.1.4, which does not verify X.509 certificates from SSL servers. Root cause: SSL certificate validation is not performed, enabling man-in-the-middle attackers to spoof servers and potentially access sens...

CVE-2014-5887

The Yell Local Search aka com.yell.launcher2 application 4.2.1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-6872

Name of the Vulnerable Software and Affected Versions Yell Local Search aka com.yell.launcher2 version 4.2.1.4 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificate...

CVE-2014-5887: Undefined Security Weakness

The Yell Local Search aka com.yell.launcher2 application 4.2.1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...