CVE-2014-6661

The CVE-2014-6661 entry concerns the Android app named netease movie (package com.netease.movie) version 4.7.2, which does not verify X.509 certificates from SSL servers. This behavior enables man-in-the-middle attackers to spoof servers and access sensitive information via a crafted certificate....