LIL WAYNE SLOTS: Slot Machines - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application LIL WAYNE SLOTS: Slot Machines published at the 'play' market has multiple vulnerabilities...

CVE-2014-5906

The Lil Wayne Slots: FREE SLOTS aka com.lilwayneslots.slots.android application 1.138 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Lil Wayne Slots: FREE SLOTS aka com.lilwayneslots.slots.android application 1.138 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5906

The Lil Wayne Slots: FREE SLOTS aka com.lilwayneslots.slots.android application 1.138 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5906

CVE-2014-5906 affects the Android app “Lil Wayne Slots: FREE SLOTS” (com.lilwayneslots.slots.android) version 1.138. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive information via a ...