CVE-2014-6665

The Ahmed Bukhatir Nasheeds TV aka com.wAhmedBukhatirApp application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6665

CVE-2014-6665 affects the Android app “Ahmed Bukhatir Nasheeds TV” (com.wAhmedBukhatirApp) v1.0. The root cause is that the app does not validate SSL X.509 certificates when establishing TLS connections, enabling MITM attackers to spoof servers and exfiltrate or modify sensitive information. The ...