CVE-2014-5672

The CVE-2014-5672 entry concerns the Android app NQ Mobile Security & Antivirus (com.nqmobile.antivirus20) version 7.2.16.00, where SSL server certificate validation is not performed. The underlying issue is failure to verify X.509 certificates, which allows man-in-the-middle attackers to spoof s...