CVE-2014-5537

The CVE-2014-5537 entry concerns the Android app Abduction Stacker Free (air.com.chewygames.abductionstacker2) v1.0.7, which does not verify X.509 certificates from SSL servers. This enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. A...