EUVD-2014-6635

Malware in sbrugna...

Information disclosure

The Koran - AlqoranVideos aka com.alqoran.videos.example application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6757

The Koran - AlqoranVideos aka com.alqoran.videos.example application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6757

The CVE-2014-6757 entry concerns the Android app “The Koran - AlqoranVideos” (com.alqoran.videos.example) version 1.0, which does not verify X.509 certificates from SSL servers. This creates a man-in-the-middle risk, allowing spoofed servers and potential exposure of sensitive information via cra...