EUVD-2012-5375

Malware in sbrugna...

Zoner AntiVirus - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Zoner AntiVirus published at the 'play' market has multiple vulnerabilities...

CVE-2012-5456

The Zoner AntiVirus Free application for Android does not verify that the server hostname matches a domain name in the subject's Common Name CN field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, as demonstrated by a...

CVE-2012-5456

The CVE-2012-5456 entry concerns the Zoner AntiVirus Free Android app, which failed to verify that the server hostname matches the domain name in the X.509 certificate’s CN during SSL/TLS, enabling MITM spoofing of the update server with an arbitrary valid certificate. According to NVD, this is a...

CVE-2012-5456

The Zoner AntiVirus Free application for Android does not verify that the server hostname matches a domain name in the subject's Common Name CN field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, as demonstrated by a...