CVE-2014-5999

The CVE-2014-5999 entry concerns the Android app autonavi (package com.telenav.doudouyou.android.autonavi, version 4.6.1). The root cause is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive information via a crafted ...