CVE-2014-7749

The CVE-2014-7749 entry concerns the CamDictionary Android app (package com.intsig.camdict) version 2.3.0.20131118, which does not verify X.509 certificates from SSL servers. This weakens SSL/TLS and can enable man-in-the-middle attackers to spoof servers and access sensitive information via a cr...

CVE-2014-7749: Undefined Security Weakness

The CamDictionary aka com.intsig.camdict application 2.3.0.20131118 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...