EUVD-2014-5587

Malware in sbrugna...

Design/Logic Flaw

The Brain lab - brain age games IQ aka com.sixdead.brainlab application 2.37 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5700

The Brain lab – brain age games IQ (com.sixdead.brainlab) Android app version 2.37 is affected by CVE-2014-5700 due to failing to verify X.509 certificates when connecting to SSL servers. The underlying issue allows man-in-the-middle attackers to spoof legitimate servers and obtain sensitive info...