CVE-2014-5629

The CVE-2014-5629 entry concerns The Stupid Zombies (com.gameresort.stupidzombies) Android app version 1.12. The vulnerability is that it does not verify X.509 certificates from SSL servers, which enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted ...