CVE-2014-7033

The Cure Viewer (com.livedoor.android.cureviewer) app v1.03 on Android is affected by CVE-2014-7033 due to not verifying X.509 certificates in SSL connections. This root cause allows man-in-the-middle attackers to spoof servers and exfiltrate sensitive information via a crafted certificate. Explo...