CVE-2014-7774

The Herbs & Flowers Dictionary Android app (com.wHerbsNFlowersDictionary) v0.1 exposes a vulnerability: it does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and access sensitive information via crafted certificates. Root cause: missing certificate verif...