CVE-2014-7633

The CVE-2014-7633 entry concerns the Android app The Dino Zoo (com.tappocket.dinozoostar) version 1.5, which does not verify X.509 certificates from SSL servers. This flaw enables potential man-in-the-middle attackers to spoof legitimate servers and exfiltrate sensitive information via crafted ce...

CVE-2014-7633: Undefined Security Weakness

The Dino Zoo aka com.tappocket.dinozoostar application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...