CVE-2014-7633

The CVE-2014-7633 entry concerns the Android app The Dino Zoo (com.tappocket.dinozoostar) version 1.5, which does not verify X.509 certificates from SSL servers. This flaw enables potential man-in-the-middle attackers to spoof legitimate servers and exfiltrate sensitive information via crafted ce...