Stupid Zombies 2 - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Stupid Zombies 2 published at the 'play' market has multiple vulnerabilities...

Stupid Zombies - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Stupid Zombies published at the 'play' market has multiple vulnerabilities...

CVE-2014-5629

The Stupid Zombies aka com.gameresort.stupidzombies application 1.12 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Stupid Zombies aka com.gameresort.stupidzombies application 1.12 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5629

The Stupid Zombies aka com.gameresort.stupidzombies application 1.12 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5629

The CVE-2014-5629 entry concerns The Stupid Zombies (com.gameresort.stupidzombies) Android app version 1.12. The vulnerability is that it does not verify X.509 certificates from SSL servers, which enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted ...