EUVD-2014-6628

Malware in sbrugna...

CVE-2014-6750

The $0.99 Kindle Books aka com.kindle.books.for99 application 6.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The $0.99 Kindle Books aka com.kindle.books.for99 application 6.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6750

The CVE-2014-6750 entry concerns the Android app “The $0.99 Kindle Books (com.kindle.books.for99)” version 6.0, which does not verify X.509 certificates from SSL servers. This behavior enables man-in-the-middle attackers to spoof servers and access sensitive information via a crafted certificate....

CVE-2014-6750

The $0.99 Kindle Books aka com.kindle.books.for99 application 6.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5925

The 10000 Kindle Books Downloads aka com.ww10000KindleBooksLatestnBestSellers application 0.312 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The 10000 Kindle Books Downloads aka com.ww10000KindleBooksLatestnBestSellers application 0.312 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5925

The CVE-2014-5925 entry concerns the Android app “10000 Kindle Books Downloads” (com.ww10000KindleBooksLatestnBestSellers) version 0.312, which does not verify X.509 certificates from SSL servers. This lack of certificate validation can allow a man-in-the-middle to spoof servers and obtain sensit...

CVE-2014-5925

The 10000 Kindle Books Downloads aka com.ww10000KindleBooksLatestnBestSellers application 0.312 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...