EUVD-2014-5762

Malware in sbrugna...

CVE-2014-5875

The Sylphone aka com.sylpheo.prospectosyl application 5.3.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5875

The CVE-2014-5875 entry concerns the Sylphone (com.sylpheo.prospectosyl) Android app version 5.3.8 that fails to verify X.509 certificates when establishing TLS connections. This undermines server authentication, enabling man-in-the-middle attackers to spoof SSL servers and potentially exfiltrate...

CVE-2014-5875

The Sylphone aka com.sylpheo.prospectosyl application 5.3.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...