EUVD-2014-5475

Malware in sbrugna...

50000 Free eBooks & AudioBooks - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application 50000 Free eBooks & AudioBooks published at the 'play' market has multiple vulnerabilities...

CVE-2014-5588

The Free eBooks aka com.bmfapps.freekindlebooks application 14 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Free eBooks aka com.bmfapps.freekindlebooks application 14 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5588

The CVE-2014-5588 entry concerns the Android app Free eBooks (com.bmfapps.freekindlebooks) version 14, which does not verify X.509 certificates from SSL servers. This allows MITM attackers to spoof servers and obtain sensitive information via crafted certificates. The connected documents (NVD/NIS...

CVE-2014-5588

The Free eBooks aka com.bmfapps.freekindlebooks application 14 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...