Design/Logic Flaw

The Quran Abu Bakr AshShatiri Free aka com.wQuranAbuBakrFREE application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7424

CVE-2014-7424 affects the Android app “Quran Abu Bakr AshShatiri Free” (com.wQuranAbuBakrFREE) version 1.0. The connected sources confirm the vulnerability is due to the app not verifying X.509 certificates when connecting to SSL servers, enabling man-in-the-middle attackers to spoof servers and ...

CVE-2014-7424

The Quran Abu Bakr AshShatiri Free aka com.wQuranAbuBakrFREE application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-7985

Name of the Vulnerable Software and Affected Versions The Quran Abu Bakr AshShatiri Free aka com.wQuranAbuBakrFREE version 1.0 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information vi...

CVE-2014-7424: Undefined Security Weakness

The Quran Abu Bakr AshShatiri Free aka com.wQuranAbuBakrFREE application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...