CVE-2014-5783

The CVE-2014-5783 entry concerns the Android app “Bouncy Bill Monster Smasher ed” (version 1.0.3). The underlying issue is that the app does not verify X.509 certificates when connecting to SSL servers, enabling MITM attackers to spoof servers and access sensitive information via a crafted certif...