EUVD-2014-7268

Malware in sbrugna...

CVE-2014-7397

The CVE-2014-7397 entry applies to the Android app “ileri Gazetesi - Yozgat” (com.byfes.ilerigazetesi) 1.0, which does not verify X.509 certificates from SSL servers. Root cause: missing certificate validation in the app’s SSL/TLS handling. Impact: enables MITM attackers to spoof servers and obta...

CVE-2014-7397: Undefined Security Weakness

The ileri Gazetesi - Yozgat aka com.byfes.ilerigazetesi application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...