Guitar Tuner Free - GuitarTuna - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Guitar Tuner Free - GuitarTuna published at the 'play' market has multiple vulnerabilities...

CVE-2014-5821

The Guitar Tuner Free - GuitarTuna aka com.ovelin.guitartuna application 2.4.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5821

CVE-2014-5821 affects the Android app Guitar Tuner Free - GuitarTuna (com.ovelin.guitartuna) version 2.4.5. The root cause is failure to verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and access sensitive information via a crafted certificate. No remediation ...