CVE-2014-7664

The CVE-2014-7664 entry concerns a Android app named Bilingual Magic Ball Relajo (com.wBilingualMagicBallRelajo, version 0.1). The vulnerability is that the app does not verify X.509 certificates from SSL servers, allowing a man-in-the-middle to spoof servers and access sensitive information via ...