CVE-2014-5654 in Kaspersky Internet Security
Summary
The Kaspersky Internet Security (aka com.kms.free) application 11.4.4.232 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Reservation
08/30/2014
Disclosure
09/08/2014
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 67461 | Kaspersky Internet Security com.kms.free cryptographic issue | 310 | Unproven | Unavailable | CVE-2014-5654 |