CVE-2014-5935

The Daily Free App @ Amazon aka com.kattanweb.android.dfaa application 1.5.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Double free

The Daily Free App @ Amazon aka com.kattanweb.android.dfaa application 1.5.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5935

The Daily Free App @ Amazon aka com.kattanweb.android.dfaa application 1.5.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5935

CVE-2014-5935 concerns the Android app “The Daily Free App @ Amazon” (package com.kattanweb.android.dfaa), version 1.5.2. The connected documents state that the client fails to verify X.509 certificates from SSL servers, constituting a failure of certificate validation. The underlying impact is e...