CVE-2014-7013

The CVE covers the Android app Funny Photo Color Editor (com.doirdeditor.funcloreditor) version 0.0.4. It fails to verify X.509 certificates from SSL servers, allowing a man‑in‑the‑middle attacker to spoof servers and obtain sensitive information via a crafted certificate. The public descriptions...