CVE-2014-7037

The Noble Sticker "FREE" aka com.kuronecostudio.kizokustamp.free application 1.0.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7037

The CVE-2014-7037 entry concerns the Android app “Noble Sticker FREE” (com.kuronecostudio.kizokustamp.free), version 1.0.7, which does not verify X.509 certificates from SSL servers. This lack of certificate validation enables man‑in‑the‑middle attackers to spoof servers and obtain sensitive info...