30 matches found
CamScanner -Phone PDF Creator - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application CamScanner -Phone PDF Creator published at the 'play' market has multiple vulnerabilities...
CVE-2014-5645
The CamScanner -Phone PDF Creator aka com.intsig.camscanner application 3.4.0.20140624 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The CamScanner -Phone PDF Creator aka com.intsig.camscanner application 3.4.0.20140624 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5645
The CVE-2014-5645 entry concerns the CamScanner -Phone PDF Creator (com.intsig.camscanner) for Android (version 3.4.0.20140624). The vulnerability is that the app does not verify X.509 certificates when establishing SSL connections, enabling man-in-the-middle attackers to spoof servers and obtain...
CVE-2014-5645
The CamScanner -Phone PDF Creator aka com.intsig.camscanner application 3.4.0.20140624 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2012-1401
Unspecified vulnerability in the CamScanner com.intsig.camscanner application 1.2.2.20110823 and 1.3.2.20120116 for Android has unknown impact and attack vectors...
CVE-2012-1401
Unspecified vulnerability in the CamScanner com.intsig.camscanner application 1.2.2.20110823 and 1.3.2.20120116 for Android has unknown impact and attack vectors...
Design/Logic Flaw
Unspecified vulnerability in the CamScanner com.intsig.camscanner application 1.2.2.20110823 and 1.3.2.20120116 for Android has unknown impact and attack vectors...
CVE-2012-1401
Technical details about CVE-2012-1401 are not publicly provided in the connected documents. The initial description notes an unspecified Android vulnerability with unknown impact and vectors. Monitor for updates from official sources for concrete affected components and remediation.