CVE-2014-5704

The CVE-2014-5704 entry applies to the DISH Anywhere app (com.sm.SlingGuide.Dish) for Android, version 3.5.10. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man‑in‑the‑middle attackers to spoof servers and access sensitive information via a crafte...