CVE-2014-7765

The CVE-2014-7765 entry concerns the Android app The Hundred Thousands Kid Book (aka it.tinytap.attsa.thousands) version 1.6.3, which does not verify X.509 certificates from SSL servers. The underlying issue enables man-in-the-middle attackers to spoof servers and obtain sensitive data via a craf...