CVE-2014-5603

The DeskRoll Remote Desktop app (com.deskroll.client1) for Android, version 0.6, is affected. It does not verify X.509 certificates when establishing SSL connections, enabling potential man-in-the-middle attackers to spoof servers and exfiltrate sensitive data via a crafted certificate. The avail...