EUVD-2014-6642

Malware in sbrugna...

Assyrian Song Quiz - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Assyrian Song Quiz published at the 'play' market has multiple vulnerabilities...

Information disclosure

The Assyrian aka com.b2.assyrian.activity application 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6764

The CVE-2014-6764 entry concerns the Android app Assyrian (com.b2.assyrian.activity) version 2.2, which does not verify X.509 certificates from SSL servers. Root cause: missing certificate validation enables man-in-the-middle attackers to spoof servers and access sensitive information via a craft...

CVE-2014-6764

The Assyrian aka com.b2.assyrian.activity application 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...