EUVD-2014-5905

Malware in sbrugna...

CVE-2014-6017

The Doodle Drop aka net.lazyer.DoodleDrop application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Doodle Drop aka net.lazyer.DoodleDrop application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6017

The CVE-2014-6017 entry concerns The Doodle Drop (aka net.lazyer.DoodleDrop) Android app 1, which does not verify X.509 certificates from SSL servers. This misconfiguration enables MITM attackers to spoof servers and exfiltrate sensitive information via crafted certificates. The vulnerability is ...

CVE-2014-6017

The Doodle Drop aka net.lazyer.DoodleDrop application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...