EUVD-2014-5691

Malware in sbrugna...

Mail.Ru Dating - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Mail.Ru Dating published at the 'play' market has multiple vulnerabilities...

CVE-2014-5804

The Mail.Ru Dating aka ru.mail.love application 3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Mail.Ru Dating aka ru.mail.love application 3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5804

The CVE-2014-5804 entry concerns the Mail.Ru Dating (ru.mail.love) Android app version 3, which fails to verify X.509 certificates when connecting to SSL servers. This certificate validation flaw enables man-in-the-middle attackers to spoof legitimate servers and potentially exfiltrate sensitive ...