EUVD-2014-7331

Malware in sbrugna...

Slots Heaven: FREE Slot Games! - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Slots Heaven: FREE Slot Games! published at the 'play' market has multiple vulnerabilities...

CVE-2014-7460

The Slots Heaven:FREE Slot Machine aka com.twelvegigs.heaven.slots application 1.123 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Slots Heaven:FREE Slot Machine aka com.twelvegigs.heaven.slots application 1.123 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7460

The CVE-2014-7460 entry concerns the Android app Slots Heaven:FREE Slot Machine (com.twelvegigs.heaven.slots) 1.123, which does not verify X.509 certificates when connecting to SSL servers. The underlying vulnerability is improper certificate validation, allowing MITM attackers to spoof servers a...

CVE-2014-7460

The Slots Heaven:FREE Slot Machine aka com.twelvegigs.heaven.slots application 1.123 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...