EUVD-2014-5515

Malware in sbrugna...

Wonder Zoo - Animal rescue ! - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Wonder Zoo - Animal rescue ! published at the 'play' market has multiple vulnerabilities...

CVE-2014-5628

The Wonder Zoo - Animal rescue ! aka com.gameloft.android.ANMP.GloftZRHM application 1.6.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Wonder Zoo - Animal rescue ! aka com.gameloft.android.ANMP.GloftZRHM application 1.6.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5628

The Wonder Zoo - Animal rescue ! aka com.gameloft.android.ANMP.GloftZRHM application 1.6.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5628

The CVE-2014-5628 entry concerns the Android app The Wonder Zoo - Animal rescue (com.gameloft.android.ANMP.GloftZRHM) version 1.6.1, which does not verify X.509 certificates from SSL servers. This weakens TLS trust, allowing a man-in-the-middle to spoof servers and obtain sensitive information vi...