CVE-2017-2103

The LaLa Call App for Android 2.4.7 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-2103

CVE-2017-2103 concerns the LaLa Call App for Android, where versions 2.4.7 and earlier do not verify X.509 certificates from SSL servers. This flaw enables Man-in-the-Middle attacks to potentially eavesdrop on encrypted communications by spoofing servers with crafted certificates. Affected softwa...