EUVD-2014-5886

Malware in sbrugna...

CVE-2014-5999

The autonavi aka com.telenav.doudouyou.android.autonavi application 4.6.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The autonavi aka com.telenav.doudouyou.android.autonavi application 4.6.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5999

The CVE-2014-5999 entry concerns the Android app autonavi (package com.telenav.doudouyou.android.autonavi, version 4.6.1). The root cause is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive information via a crafted ...

CVE-2014-5999

The autonavi aka com.telenav.doudouyou.android.autonavi application 4.6.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5999: Undefined Security Weakness

The autonavi aka com.telenav.doudouyou.android.autonavi application 4.6.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-6984

Name of the Vulnerable Software and Affected Versions autonavi aka com.telenav.doudouyou.android.autonavi version 4.6.1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509...