EUVD-2014-6965

Malware in sbrugna...

Information disclosure

The Killer Screen lock aka com.cc.theme.shashou application 0.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7086

The CVE-2014-7086 entry concerns the Android app Killer Screen lock (com.cc.theme.shashou) version 0.5, where the SSL/TLS client does not verify X.509 certificates. This root cause enables MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The vulnerabilit...

CVE-2014-7086: Undefined Security Weakness

The Killer Screen lock aka com.cc.theme.shashou application 0.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-7758

Name of the Vulnerable Software and Affected Versions The Killer Screen lock aka com.cc.theme.shashou application version 0.5 for Android Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive...