CVE-2014-7763

The Listen up! mirucho aka jp.ameba.kiiteyo.android application 1.1.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7763

The CVE-2014-7763 entry concerns the Android application Listen up! mirucho (jp.ameba.kiiteyo.android), version 1.1.8, which fails to verify X.509 certificates when establishing SSL/TLS connections. This misconfiguration enables man-in-the-middle attackers to spoof trusted servers and obtain sens...