EUVD-2014-7541

Malware in sbrugna...

Design/Logic Flaw

The Motor Town: Machine Soul Free aka com.alawar.motortownfree application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7670

The CVE pertains to The Motor Town: Machine Soul Free Android app (com.alawar.motortownfree) version 1.1. It does not verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and obtain sensitive information with crafted certificates. Impact is described as partial con...

CVE-2014-7670

The Motor Town: Machine Soul Free aka com.alawar.motortownfree application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...