Design/Logic Flaw

The Quran Abu Bakr AshShatiri Free aka com.wQuranAbuBakrFREE application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7424

The Quran Abu Bakr AshShatiri Free aka com.wQuranAbuBakrFREE application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7424

CVE-2014-7424 affects the Android app “Quran Abu Bakr AshShatiri Free” (com.wQuranAbuBakrFREE) version 1.0. The connected sources confirm the vulnerability is due to the app not verifying X.509 certificates when connecting to SSL servers, enabling man-in-the-middle attackers to spoof servers and ...