EUVD-2012-5375

Malware in sbrugna...

Zoner AntiVirus - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Zoner AntiVirus published at the 'play' market has multiple vulnerabilities...

CVE-2012-5456

The Zoner AntiVirus Free application for Android does not verify that the server hostname matches a domain name in the subject's Common Name CN field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, as demonstrated by a...

CVE-2012-5456

The Zoner AntiVirus Free application for Android does not verify that the server hostname matches a domain name in the subject's Common Name CN field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, as demonstrated by a...

CVE-2012-5456

The CVE-2012-5456 entry concerns the Zoner AntiVirus Free Android app, which failed to verify that the server hostname matches the domain name in the X.509 certificate’s CN during SSL/TLS, enabling MITM spoofing of the update server with an arbitrary valid certificate. According to NVD, this is a...

CVE-2012-5456: Undefined Security Weakness

The Zoner AntiVirus Free application for Android does not verify that the server hostname matches a domain name in the subject's Common Name CN field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, as demonstrated by a...

PT-2012-5981

Name of the Vulnerable Software and Affected Versions Zoner AntiVirus Free affected versions not specified Description The issue concerns a failure to verify the server hostname against the domain name in the subject's Common Name field of the X.509 certificate. This allows for man-in-the-middle...